An integer overflow vulnerability exists in the CredentialProvider of Google Chrome on Windows platforms before version 149.0.7827.53. Exploitation requires prior compromise of the renderer process and involves delivering a crafted HTML page that triggers the overflow, enabling OS-level privilege escalation. The vulnerability is rated with a CVSS 3.1 score of 7.5 (high severity), reflecting network attack vector with high impact on confidentiality, integrity, and availability. Google has released a stable update to fix this issue as noted in their official advisory.

Successful exploitation allows an attacker with control over the renderer process to escalate privileges to the operating system level, potentially gaining full control over the affected Windows system. This elevates the attacker's capabilities beyond the browser sandbox, increasing the risk of system compromise. No active exploitation in the wild has been reported.

Apply the official Google Chrome update to version 149.0.7827.53 or later, which addresses this vulnerability. Users should update their Chrome installations promptly to mitigate the risk. Since this is a client-side application vulnerability and not a cloud service, remediation depends on end-user patching. Patch status is confirmed by the vendor advisory linked.