This vulnerability in Google Chrome's Mojo component on Windows arises from improper privilege management. It allows a local attacker to potentially execute arbitrary code outside the browser's sandbox environment by leveraging a local program. The issue affects Chrome versions before 154.0.8037.92. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, but results in a complete breach of confidentiality, integrity, and availability with scope change.

Successful exploitation could lead to arbitrary code execution outside the sandbox, compromising the system's security by allowing an attacker to gain elevated privileges and control over the affected machine. This could result in full system compromise on Windows platforms running vulnerable Chrome versions.

A fix is available in Google Chrome version 154.0.8037.92. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html for more details.