CVE-2014-9646

CVE-2014-9646 describes an unquoted Windows search path vulnerability in Google Chrome versions prior to 40.0.2214.91, specifically within the uninstall-survey feature. This flaw allows a local attacker to achieve privilege escalation by placing a malicious executable, such as "program.exe," in the system drive. The vulnerability has a CVSS score of 4.6, indicating a medium severity. It requires local access (AV:L) and has low attack complexity (AC:L), with potential impacts on confidentiality, integrity, and availability (C:P/I:P/A:P). There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting low public awareness and interest.