CVE-2026-14124
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0th percentile — higher than 0% of all known CVEs
Summary
An inappropriate implementation in the CredentialProvider component of Google Chrome on Windows (prior to version 150.0.7871.47) allowed a local attacker to perform OS-level privilege escalation via a malicious file. The issue was rated as low severity by the Chromium team.
Risk Assessment
A local attacker could gain elevated privileges on the system, potentially leading to full machine compromise or malware installation.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later. Restrict physical access to workstations and enforce the principle of least privilege.
Original NVD description (English source)
Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Low)