This vulnerability (CVE-2026-10974) affects Google Chrome versions before 149.0.7827.53 and stems from insufficient validation of untrusted input in the ANGLE graphics abstraction layer. Exploitation could enable a remote attacker to escape the browser sandbox through a specially crafted HTML page, potentially leading to full compromise of the affected system. The CVSS v3.1 base score is 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. Although no known exploits are reported, the severity is critical. The vendor has published an advisory with a stable channel update, but the exact patch status is not explicitly confirmed in the input data.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox, potentially gaining elevated privileges and executing arbitrary code on the host system. This compromises confidentiality, integrity, and availability of the affected system. The vulnerability is exploitable remotely via a crafted HTML page and requires user interaction.

A stable channel update addressing this vulnerability has been published by Google as per the vendor advisory. However, the explicit patch status is not confirmed in the provided data. Users and administrators should apply the latest Chrome updates promptly once available. Monitor the official Google Chrome release blog for confirmation and further remediation guidance.