This vulnerability in Google Chrome for Windows arises from improper validation of untrusted input within the user interface, enabling local attackers to perform privilege escalation by leveraging a malicious file. The affected versions are those prior to 149.0.7827.53. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates that the attack requires local access and user interaction but can lead to high impact on confidentiality, integrity, and availability. The issue is categorized as a high-severity security flaw by Chromium's security team.

Successful exploitation allows a local attacker to escalate privileges on the affected system, potentially gaining higher-level access than originally permitted. This can compromise system confidentiality, integrity, and availability. No known exploits are reported in the wild, which may limit immediate risk but does not eliminate the threat.

The vendor has published a stable channel update advisory for Chrome, which likely includes a fix for this vulnerability. However, the explicit patch or remediation status is not confirmed in the provided data. Users should update Google Chrome to version 149.0.7827.53 or later as soon as possible. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance.