CVE-2026-11103 is a vulnerability in the Installer of Google Chrome on Windows platforms prior to version 149.0.7827.53. The inappropriate implementation in the installer allows a local attacker to perform OS-level privilege escalation by exploiting a malicious file. The vulnerability is categorized under CWE-269 (Improper Privilege Management) and has a CVSS v3.1 base score of 7.8, indicating high severity. The attack vector requires local access with low attack complexity and no privileges, but user interaction is required. Confidentiality, integrity, and availability impacts are all high. Google has published a stable channel update to fix this issue.

Successful exploitation of this vulnerability allows a local attacker to escalate their privileges to the operating system level, potentially gaining full control over the affected system. This can lead to unauthorized access, modification, or destruction of data and system resources. The vulnerability affects confidentiality, integrity, and availability with high impact.

Google has released an update in Chrome version 149.0.7827.53 that addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. No additional mitigation steps are specified in the vendor advisory. Patch status is confirmed by the vendor's stable channel update announcement.