This vulnerability is a race condition in the codecs implementation of Google Chrome on Windows platforms before version 149.0.7827.53. It enables a remote attacker, with control over the renderer process, to potentially perform a sandbox escape via a specially crafted HTML page. The issue is classified as high severity with a CVSS 3.1 score of 8.3, indicating high impact on confidentiality, integrity, and availability. The vulnerability was publicly disclosed on June 4, 2026. The vendor advisory URL is available but does not explicitly confirm patch availability in the provided information.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox environment, potentially gaining higher privileges on the affected system. This could lead to full system compromise, including unauthorized access to sensitive data and system resources. The high CVSS score reflects significant potential impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update Google Chrome to version 149.0.7827.53 or later once available. Until confirmed, avoid visiting untrusted or suspicious websites that could host crafted HTML pages exploiting this vulnerability.