This vulnerability involves a use-after-free condition in the Chromoting feature of Google Chrome on Windows platforms before version 149.0.7827.155. Exploitation requires local access and user interaction, enabling an attacker to escalate privileges to the OS level via a crafted malicious file. The CVSS 3.1 vector indicates low attack complexity, no privileges required initially, but user interaction is needed. The impact includes high confidentiality, integrity, and availability consequences. The vendor advisory URL is provided but does not explicitly confirm patch availability or remediation status.

Successful exploitation can lead to operating system-level privilege escalation, allowing an attacker with local access and user interaction to gain elevated rights. This can compromise system confidentiality, integrity, and availability. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html for current remediation guidance. Until official confirmation, users should avoid opening untrusted files and limit local access to trusted users only.