This vulnerability arises from improper validation of untrusted input within the WebNN feature of Google Chrome on Windows platforms before version 149.0.7827.53. An attacker who has already compromised the renderer process could exploit this flaw by delivering a specially crafted HTML page, enabling them to escape the browser's sandbox environment. This sandbox escape could lead to broader system compromise beyond the browser context. The CVSS 3.1 vector indicates the attack requires network access, no privileges, user interaction, and results in complete system compromise (confidentiality, integrity, and availability).

Successful exploitation allows a remote attacker with control over the renderer process to escape Chrome's sandbox, potentially leading to full system compromise on affected Windows systems. This elevates the attacker's capabilities from browser-level to system-level, significantly increasing the risk to user data and system integrity.

Google has released Chrome version 149.0.7827.53 which addresses this vulnerability. Users and administrators should update affected Chrome installations to version 149.0.7827.53 or later to remediate this issue. No additional temporary mitigations are documented in the vendor advisory. Patch status is not explicitly confirmed in the advisory, but the presence of the fixed version indicates an official fix is available.