This vulnerability involves a type confusion flaw in the ANGLE graphics engine used by Google Chrome. It affects Chrome versions before 149.0.7827.53 and can be triggered remotely via a specially crafted HTML page. Successful exploitation may lead to a sandbox escape, compromising the browser's security boundaries. The CVSS vector indicates the attack requires no privileges and low attack complexity but requires user interaction. The impact includes high confidentiality, integrity, and availability loss.

If exploited, this vulnerability could allow an attacker to escape the Chrome sandbox, potentially leading to full compromise of the affected system. The attacker could execute arbitrary code with elevated privileges, resulting in complete control over the victim's environment. The CVSS score of 9.6 reflects critical impact on confidentiality, integrity, and availability.

A fixed version, Chrome 149.0.7827.53, has been released by Google. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory. Patch status is not explicitly stated in the advisory, but the presence of the fixed version implies an official fix is available. Refer to the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for update instructions.