This vulnerability arises from insufficient validation of untrusted input within the WebNN feature of Google Chrome on Windows versions before 149.0.7827.53. An attacker who has compromised the renderer process could exploit this flaw to perform a sandbox escape, potentially increasing their privileges or access beyond the renderer sandbox. The issue is recognized by Chromium security with a medium severity rating. No CVSS score or detailed remediation information is provided in the data, though a vendor advisory link to a stable channel update is available.

If exploited, this vulnerability could allow an attacker who already controls the renderer process to escape the sandbox environment, potentially leading to increased privileges or further compromise of the host system. However, there are no known exploits in the wild at this time. The impact is limited to scenarios where the renderer process is already compromised.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update Google Chrome to version 149.0.7827.53 or later once available. Until official confirmation of a fix is provided, no additional mitigation steps are specified by the vendor.