CVE-2026-14124 describes a local privilege escalation vulnerability in the CredentialProvider implementation of Google Chrome on Windows platforms. The flaw allows a local attacker to escalate privileges by leveraging a malicious file. The vulnerability affects Chrome versions prior to 150.0.7871.47. The CVSS v3.1 base score is 7.8, indicating high severity with impact on confidentiality, integrity, and availability. The vendor advisory linked does not explicitly state if an official fix has been released, and no patch links are provided in the data.

Successful exploitation of this vulnerability enables a local attacker to gain elevated operating system privileges, potentially compromising system confidentiality, integrity, and availability. The attack requires local access and user interaction, limiting remote exploitation. No public exploits are currently known.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, restrict local access to trusted users only and avoid executing untrusted files. Monitor for updates from Google regarding this vulnerability.