This vulnerability in Google Chrome's Updater component arises from insufficient validation of untrusted input. A local attacker can exploit this flaw by supplying a malicious file to perform OS-level privilege escalation. The issue affects Chrome versions prior to 151.0.7922.72. The CVSS v3.1 score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory URL is provided but does not explicitly confirm patch status in the input data.

Successful exploitation allows a local attacker to escalate privileges on the operating system, potentially gaining higher-level access than intended. This can compromise system confidentiality, integrity, and availability. No active exploitation in the wild is currently known.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until confirmation, users should apply updates promptly once available and avoid executing untrusted files locally.