The vulnerability is a missing authorization flaw in the DevTools component of Google Chrome, which existed before version 156.0.8078.47. A local attacker can bypass system access restrictions by running or loading a local program that leverages this missing check, potentially enabling execution of code outside the browser sandbox and compromising system integrity.

All installations of Google Chrome before version 156.0.8078.47 are affected. Users running any earlier stable version are vulnerable to this flaw.

The CVSS score of 9.6 indicates a very high severity. The EPSS score of < 1% reflects a very low but nonzero probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires a local attacker to execute a malicious program or load a local resource that triggers the DevTools flaw. Successful exploitation allows privilege escalation or unauthorized system access, posing a catastrophic threat to confidentiality, integrity, and availability.