This vulnerability arises from insufficient validation of untrusted input within the Updater component of Google Chrome on Windows versions before 148.0.7778.96. A local attacker can exploit this by supplying a malicious file to perform OS-level privilege escalation. The issue is classified with medium severity by the Chromium security team. The vulnerability is documented as CVE-2026-7990 and was published on May 6, 2026. Although a vendor advisory URL is provided, it does not explicitly confirm patch availability or remediation details in the input data.

The vulnerability enables a local attacker to escalate privileges on the affected Windows system by exploiting improper input validation in the Chrome Updater. This could allow the attacker to gain higher-level access than intended, potentially compromising system integrity. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Until confirmation of an official fix, users should apply the latest Chrome updates promptly once available to mitigate this vulnerability.