This vulnerability involves a race condition in the Chromoting feature of Google Chrome on Windows platforms before version 148.0.7778.96. A local attacker can exploit this race condition by using a specially crafted malicious file to escalate privileges on the affected system. The CVSS vector indicates the attack requires network access with high attack complexity, no privileges, and user interaction, resulting in high confidentiality, integrity, and availability impacts. The vulnerability is categorized as high severity by Chromium security.

Successful exploitation of this vulnerability allows a local attacker to escalate privileges on the affected Windows system via a malicious file, potentially leading to unauthorized access or control over system resources. No known exploits are reported in the wild, which may reduce immediate risk but does not eliminate the threat.

The vendor has released a stable channel update referenced in the advisory (https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html). However, the explicit patch or remediation status is not confirmed in the provided data. Users should update Google Chrome to version 148.0.7778.96 or later once available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.