The flaw stems from an inappropriate implementation in Chrome’s Chromoting component on Windows, enabling a local attacker to execute a specially crafted file that escalates privileges to OS‑level. This grants the attacker capabilities to modify system settings, install software, or access sensitive data under the victim’s account, effectively compromising the integrity and confidentiality of the affected machine. The weakness aligns with a typical privilege‑elevation vulnerability.

Google Chrome for Windows versions earlier than 148.0.7778.96 are susceptible. Systems running any older stable release that have Chromoting enabled may be impacted. The issue is confined to Windows platforms using Chrome as the browser.

The issue has a CVSS score of 7.8, reflecting a high severity assessment; it has no reported EPSS score and is not listed in the CISA KEV catalog, yet the local nature of the flaw still poses a significant risk in environments where users execute untrusted files. An attacker must have local access to place a malicious file or persuade a user to run Chrome with the harmful payload. Once executed, the elevated rights can lead to unchecked system modifications.