This vulnerability involves a heap buffer overflow in the video processing component of Google Chrome before version 149.0.7827.53. An attacker with control over the renderer process can exploit this flaw via a specially crafted HTML page to perform a sandbox escape, potentially leading to full compromise of the browser environment. The CVSS score of 8.3 reflects the high impact on confidentiality, integrity, and availability, with network attack vector and user interaction required. The issue is publicly disclosed and patched in the referenced stable channel update.

Successful exploitation can lead to sandbox escape from the renderer process, enabling an attacker to execute arbitrary code with higher privileges within the browser context. This can compromise browser security, potentially leading to further system compromise depending on the environment. The vulnerability affects confidentiality, integrity, and availability of the affected system.

A fix is available in Google Chrome version 149.0.7827.53 and later. Users and administrators should update to this version or a more recent release to remediate the vulnerability. Since this is not a cloud service, patching the client software is required. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for detailed update instructions.