This vulnerability arises from inappropriate implementation of policy enforcement in the Enterprise component of Google Chrome versions before 149.0.7827.53. It enables a local attacker who has physical access to the device to perform privilege escalation. The issue is classified as low severity by the Chromium security team. The vulnerability was publicly disclosed on June 4, 2026. There is no detailed technical information about the exploitation method or impact beyond privilege escalation. The vendor advisory is referenced but does not explicitly state patch or mitigation details.

A local attacker with physical access to a device running an affected version of Google Chrome could escalate their privileges due to insufficient policy enforcement in the Enterprise feature. This could potentially allow the attacker to gain higher-level access on the device. However, the severity is rated low, indicating limited impact or difficulty in exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official fixes are confirmed, restrict physical access to devices running affected Chrome versions to mitigate risk. Monitor vendor communications for updates on patches or official mitigations.