This vulnerability arises from insufficient validation of untrusted input within the Updater component of Google Chrome on Mac platforms before version 148.0.7778.96. A local attacker could exploit this flaw by supplying a malicious file to escalate privileges at the OS level. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The vulnerability is specific to local privilege escalation and requires user interaction. No official remediation level or patch status is explicitly stated in the provided vendor advisory link.

Successful exploitation allows a local attacker to gain elevated operating system privileges, potentially leading to full system compromise. The attack requires local access and user interaction. Confidentiality, integrity, and availability impacts are rated high according to the CVSS vector. No evidence of active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Until official patches or updates are confirmed, limit local access to trusted users and avoid executing untrusted files related to Chrome Updater. Monitor for updates from Google and apply them promptly once available.