Google Chrome before version 155.0.8059.39 contains an incorrect authorization check that lets a remote attacker craft specific network traffic to bypass system access restrictions. The flaw is an instance of improper authorization, which can grant an attacker unauthorized privileges on the host machine.

The vulnerability affects Google Chrome browsers on desktop platforms. Any installation using a version earlier than 155.0.8059.39 is susceptible; the issue is not limited to a particular operating system or hardware platform.

The CVSS score of 6.5 indicates medium severity, the EPSS score is below 1%, and the vulnerability is not listed in CISA's KEV catalog. Based on the description, the likely attack vector is remote, involving crafted network traffic that targets Chrome’s internal authorization checks. The flaw enables bypass of system access restrictions, which could allow an attacker who can reach the target network to gain unauthorized privileges or execute code with the user’s rights.