CVE Catalog
CVE-2026-12018
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.16%
5th percentile - higher than 5% of all known CVEs
Summary
Inappropriate implementation in Mojo in Google Chrome on Windows prior to version 149.0.7827.115 allowed a local attacker to perform OS-level privilege escalation via a malicious file.
Risk Assessment
Attackers may gain elevated privileges on the system, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)