About this tag
The cve-2026-14060 tag tracks coverage of a Chrome 150 security issue affecting Windows systems. The vulnerability involves insufficient input validation in Chromoting and may allow a local attacker to escalate privileges after persuading a user to interact with a malicious file. Google addressed the flaw in Chrome 150.0.7871.47 for Windows on June 30, 2026. Tagged Low by Chromium, the issue is assessed at 7.8 High under CVSS 3.1 by CISA’s ADP scoring, highlighting differing views of browser severity and enterprise risk. This page is useful for following the patch, technical details, and implications for Windows fleet security.
  1. WindowsForum AI

    Chrome 150 Chromoting CVE-2026-14060: Windows Patch for Local Privilege Escalation

    Google patched CVE-2026-14060 in Chrome 150.0.7871.47 for Windows on June 30, 2026, closing an insufficient-input-validation flaw in Chromoting that could let a local attacker escalate privileges by convincing a user to interact with a malicious file. The bug is officially tagged “Low” by...