Chrome installers on Windows versions before 155.0.8059.79 contain a privilege‑elevation flaw that permits a local attacker to gain elevated rights when the installer is run. The vulnerability, classified as CWE‑250, allowed the attacker to retrieve sensitive information through a locally executed program. Chromium marks this issue as high severity.

The flaw affects Google Chrome installed on Windows systems using versions prior to 155.0.8059.79. Any user running the installer on a local machine is at risk; the issue does not mention remote exploitation.

The CVSS base score of 5.5 indicates a moderate technical risk, while the EPSS score of less than 1% reflects very low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog, suggesting limited known activity. Exploitation requires local access to launch the installer, implying that a local attacker or compromised local account could leverage the flaw to elevate privileges and potentially read or modify protected data.