A privilege escalation vulnerability in Google Chrome on Windows permits local attackers to elevate privileges through a malicious file, creating significant host compromise risks.

This is an inappropriate implementation weakness in the Chromoting component requiring user interaction, where an unauthenticated local attacker can leverage a malicious file to achieve total technical impact.

A successful exploitation of this vulnerability allows a local attacker to achieve full operating system level privilege escalation, potentially granting complete control over the affected Windows workstation. While the CVSS score is 7.8, the potential for total system compromise creates severe operational and security risks for organization endpoints.

Immediate Action: Update Google Chrome on Windows to version 148.0.7778.96 or later.

Proactive Monitoring: Monitor endpoint telemetry for unusual process execution chains originating from the Google Chrome application directory.

Compensating Controls: Enforce strict software restriction policies and limit local user privileges to minimize the risk of malicious file execution.

Public Exploit Available: No

Given the high severity of potential privilege escalation on endpoint workstations, administrators should apply the vendor security updates immediately. Ensuring all desktop installations are brought up to the patched version is critical to mitigating host compromise risks.