This vulnerability arises from improper input validation in the Dawn component of Google Chrome versions before 149.0.7827.53. An attacker who has already compromised the renderer process can leverage this flaw to execute arbitrary code inside the sandbox environment by delivering a specially crafted HTML page. The CVSS score of 8.8 reflects the high impact on confidentiality, integrity, and availability, with network attack vector, low attack complexity, no privileges required, and user interaction needed.

Successful exploitation allows an attacker to execute arbitrary code inside the sandbox, potentially leading to full compromise of the affected Chrome process. This can result in complete loss of confidentiality, integrity, and availability of the browser environment. However, exploitation requires prior compromise of the renderer process and user interaction.

The vendor has released a stable channel update for desktop Chrome as referenced in the advisory (https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html). Users should update to version 149.0.7827.53 or later to remediate this vulnerability. Patch status is not explicitly stated in the provided data, so users should verify the update availability and apply it promptly.