This vulnerability involves a use-after-free condition in the Tracing feature of Google Chrome on Windows platforms before version 151.0.7922.72. Exploiting this flaw enables a local attacker to perform OS-level privilege escalation by crafting a malicious file that triggers the vulnerability. The CVSS 3.1 vector indicates the attack requires local access with low complexity and user interaction, but results in high confidentiality, integrity, and availability impact.

Successful exploitation allows a local attacker to escalate privileges on the affected Windows system, potentially gaining higher-level access than intended. This can compromise system confidentiality, integrity, and availability. There are no reports of active exploitation in the wild.

A fixed version, 151.0.7922.72, is available from Google. Users and administrators should update Google Chrome on Windows to version 151.0.7922.72 or later to remediate this vulnerability. Refer to the official Google Chrome stable channel update advisory for details: https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html