Description

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High)

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "8.8",
  "pubDate": "2026-08-20T21:17:09.920Z",
  "pubdate": "2026-08-20T21:17:09.920Z",
  "executiveSummary": "A privilege elevation vulnerability exists within the Import component of Google Chrome prior to version 151.0.7922.173, carrying a Chromium security severity rating of High. This security flaw enables a remote attacker to potentially execute arbitrary code outside the restricted browser sandbox environment. Successful exploitation requires the attacker to leverage social engineering tactics to induce a user into interacting with a specifically crafted file. The primary risk implication involves sandbox escape, which significantly increases the potential impact on the underlying operating system and compromises the defense-in-depth architecture of the browser. The attacker capabilities are contingent upon successful user interaction, specifically the ingestion or processing of the malicious file through the vulnerable import mechanism. No specialized pre-existing access to the host system is required, but the attack vector relies on external social engineering vectors to initiate the execution chain. Remediation requires updating the affected product to the secure version or later where the underlying flaw in the import functionality is addressed.",
  "technicalDetails": "The vulnerability resides in the Import component of Google Chrome prior to version 151.0.7922.173. The root cause stems from improper validation or handling of data structures processed during file import operations, which can be manipulated via a crafted file. The attack flow initiates when a remote attacker delivers a maliciously structured file to the victim, typically employing social engineering techniques to convince the user to open or import the file within the browser. Upon processing the crafted file through the vulnerable import functionality, memory corruption or logic flaws are triggered within the context of the application. Because the vulnerability involves privilege elevation and sandbox escape, successful execution of the payload allows the attacker to break out of the restricted Chromium sandbox boundaries. Consequently, arbitrary code execution is achieved outside the sandbox, granting the attacker the ability to execute native instructions and interact with the underlying operating system under the security context of the user running the browser process. The exploitation vector does not require prior authentication or elevated local privileges on the host system, but it is strictly dependent on the successful completion of the social engineering prerequisite where the user interacts with the crafted file. Affected systems comprise all Google Chrome installations running software versions preceding 151.0.7922.173. Post-exploitation impact includes potential system compromise, unauthorized data access, and persistence on the host, depending on the privileges of the user executing the browser instance."
}