A high-severity privilege escalation vulnerability in Google Chrome for Mac allows local attackers to gain elevated system permissions.

The vulnerability stems from an inappropriate implementation within the software updater component. This flaw requires local access and user interaction to execute, enabling an attacker to escalate privileges to the operating system level.

Successful exploitation of this vulnerability allows a local user to gain unauthorized administrative control over the affected Mac system. This presents a significant risk to data confidentiality, system integrity, and overall endpoint security. While the CVSS score of 7.8 reflects a high severity, the requirement for local access and user interaction slightly lowers the immediate urgency compared to remote code execution flaws.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later to ensure the vulnerable updater component is patched.

Proactive Monitoring: Monitor system logs for unusual process execution patterns or unauthorized attempts to modify files within the Google Chrome application directory.

Compensating Controls: Enforce strict file system permissions and implement endpoint detection and response (EDR) solutions to identify and block suspicious local processes.

Public Exploit Available: Unknown

Given the potential for full system compromise, administrators should prioritize updating Google Chrome across all managed macOS endpoints. Applying the vendor-provided update is the only effective way to remediate this flaw and prevent unauthorized escalation of privileges.