The vulnerability is a race condition in Chrome’s chromoting component on Windows that allows a local attacker who can create a malicious file to gain elevated privileges. The flaw is identified as CWE‑362 and the Chromium project rates its severity as Medium.

Google Chrome running on Windows is affected. Versions prior to 148.0.7778.96 on Windows are potentially vulnerable, as indicated by the advisory. No additional version details are provided in the CVE entry.

The EPSS score is not available, and the vulnerability is not listed in CISA KEV. The CVSS score of 7.5 indicates a High severity. Because the race condition requires local execution of a crafted file, the attack vector is local. An attacker can place a malicious file that exploits the race, leading to privilege escalation and potentially compromising confidentiality, integrity, and availability of the affected system.