This vulnerability involves an inappropriate implementation in the Google Chrome Installer on Windows platforms before version 149.0.7827.53. A local attacker can leverage this flaw by supplying a malicious file to perform OS-level privilege escalation. The issue was publicly disclosed on June 4, 2026, and is classified with medium severity by the Chromium security team. No CVSS score or detailed technical exploit information is provided. The vendor advisory references a stable channel update but does not explicitly state if this update fully mitigates the vulnerability.

Successful exploitation of this vulnerability allows a local attacker to gain elevated privileges on the affected Windows system, potentially leading to unauthorized system-level actions. There are no known exploits in the wild at the time of disclosure. The impact is limited to local attackers rather than remote exploitation.

The vendor has released a stable channel update for Google Chrome, version 149.0.7827.53, which addresses this vulnerability. Users should update to this version or later to remediate the issue. Patch status is not explicitly confirmed in the advisory, so users should verify their Chrome version and apply the update promptly. No additional mitigation steps are indicated by the vendor.