This vulnerability involves a use-after-free condition in the Chromoting feature of Google Chrome on Windows platforms before version 148.0.7778.96. Exploitation requires local access and user interaction, allowing an attacker to escalate privileges on the affected system. The CVSS vector indicates low attack complexity, no privileges required initially, but user interaction is necessary. The impact includes high confidentiality, integrity, and availability consequences. The vendor advisory linked corresponds to a stable channel update that presumably fixes this issue.

Successful exploitation allows a local attacker to escalate privileges to the OS level, potentially gaining full control over the affected system. This can lead to unauthorized access, modification, or disruption of system resources. The vulnerability affects confidentiality, integrity, and availability at a high level.

A fix is available in Google Chrome version 148.0.7778.96. Users should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for detailed update instructions. No additional mitigation steps are indicated by the vendor advisory.