The vulnerability is a use‑after‑free condition within Google Chrome’s updater component on macOS. A malicious file supplied by a local attacker can trigger the flaw, allowing alter program behavior and potentially elevate privileges. The weakness is classified as CWE‑416 and is the primary technical detail in the description. The impact is limited to operations performed by authenticated users on the affected machine.

Google Chrome installations on macOS running a version earlier than 150.0.7871.47 are vulnerable. The flaw can be triggered by a local attacker who has write access to the Chrome updater directory, enabling the creation of a malicious file that exploits the use‑after‑free. Based on the description, it is inferred that the attacker must have the ability to place a malicious file into that directory.

The vulnerability has a CVSS score of 7.8, indicating a high‑severity flaw. The EPSS score is < 1%, signifying a very low probability of exploitation. The attack vector is local; based on the description, it is inferred that the exploit requires local file system access and the presence of a malicious file in the updater directory. Successful exploitation could enable the attacker to gain elevated privileges on the compromised system.