This vulnerability allows a remote attacker to elevate privileges in Google Chrome by exploiting the Import feature before version 151.0.7922.173. The attacker must leverage social engineering to convince the user to open a specially crafted file, which can then execute code outside the sandbox environment, potentially compromising the host system. The vulnerability is classified as high severity by Chromium security but lacks a CVSS score. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

Successful exploitation could allow arbitrary code execution outside the sandbox, leading to potential system compromise or unauthorized actions with elevated privileges. The attack requires user interaction through social engineering, which may limit its ease of exploitation but still poses a significant risk.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0404570826.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with files received from untrusted sources and avoid opening unexpected or suspicious files.