cve-2026-14094

CVE-2026-14094 is a Chrome for Windows vulnerability affecting versions before 150.0.7871.47. The flaw is a use-after-free issue in the browser installer that could allow a local attacker to escalate privileges at the operating-system level with a malicious file. NVD published the vulnerability on June 30, 2026, while Google identified its late-June Stable Channel update as the fix. This tag page tracks the reported issue and its Windows administration implications, including the importance of treating browser updates as part of endpoint patching. It is relevant to administrators reviewing Chrome security updates and local privilege-escalation risks.