This vulnerability arises from inadequate validation of untrusted input within the SiteIsolation component of Google Chrome on Windows versions before 149.0.7827.53. An attacker who has compromised the renderer process might exploit this flaw to perform a sandbox escape via a specially crafted HTML page, potentially increasing their privileges or access beyond the renderer sandbox. The issue is recognized by Chromium security as medium severity. No CVSS score is assigned, and no direct patch or remediation level is specified in the provided data. The vendor advisory link points to a stable channel update announcement, which likely includes the fix in version 149.0.7827.53 or later.

If exploited, this vulnerability could allow an attacker with control over the renderer process to escape the sandbox environment, potentially leading to increased access or control on the affected system. However, exploitation requires prior compromise of the renderer process. The vulnerability is rated medium severity by Chromium security. There are no known exploits in the wild at the time of publication.

The vulnerability affects Google Chrome versions prior to 149.0.7827.53 on Windows. Users should update to version 149.0.7827.53 or later, as indicated by the vendor advisory for the stable channel update. Since this is a client application, patching the browser to the fixed version is the recommended remediation. Patch status is not explicitly stated but implied by the version update. Check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for confirmation and further guidance.