This vulnerability (CVE-2026-7913) affects Google Chrome on Android versions prior to 148.0.7778.96. It stems from insufficient enforcement of security policies within the DevTools feature, which can be exploited by a local attacker through a crafted malicious file to escalate privileges. The CVSS score of 7.8 reflects a high-severity risk with potential impacts on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-693 (Protection Mechanism Failure). There is no explicit vendor advisory detail confirming patch availability, though the referenced Chrome stable channel update blog post should be consulted for remediation information.

Successful exploitation allows a local attacker to escalate privileges on affected devices, potentially leading to full compromise of the Chrome environment on Android. The vulnerability impacts confidentiality, integrity, and availability of the system. No public exploits are known at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 148.0.7778.96 or later once available. Until then, limiting local access to trusted users may reduce risk.