This vulnerability involves an out-of-bounds read in the Headless mode of Google Chrome before version 148.0.7778.216. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape via a crafted HTML page. The sandbox escape could potentially allow the attacker to break out of the restricted execution environment, increasing the impact of a renderer compromise. The vulnerability is classified as medium severity by Chromium security. No CVSS score or detailed remediation information is provided in the input data. The vendor advisory URL points to a stable channel update announcement, which may include a fix.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to escape the sandbox, potentially leading to greater control over the host system. However, exploitation requires prior compromise of the renderer process. The severity is medium, indicating a moderate risk level. There are no known exploits in the wild at this time.

Patch status is not explicitly confirmed in the provided data. The vendor advisory linked is a stable channel update announcement for Chrome, which likely includes a fix for this vulnerability. It is recommended to update Google Chrome to version 148.0.7778.216 or later to mitigate this issue. Users should consult the vendor advisory for the latest remediation guidance.