A cryptographic flaw in the Enterprise feature of Google Chrome allows a privileged network attacker to bypass discretionary access controls via malicious network traffic. The vulnerability enables the attacker to gain unauthorized access to protected resources or data handled by the browser, effectively escalating privileges or breaching confidentiality.

Google Chrome desktop versions prior to 151.0.7922.72 on Windows, macOS, and Linux are affected. Users running Chrome 150.x or earlier are vulnerable.

The CVSS score of 9.1 reflects high severity, while an EPSS score of less than 1% indicates a currently low probability of exploitation. The flaw is not listed in the CISA KEV catalog. Because the vulnerability requires a network attacker to insert or tamper with traffic destined for Chrome, the likely attack vector involves a compromised router or other privileged network position. Although the likelihood is low, the potential impact warrants prompt remediation.