This vulnerability in Google Chrome's WebView on Android arises from an inappropriate implementation that permits a remote attacker, with control over the renderer process, to perform a sandbox escape by delivering a specially crafted HTML page. This could lead to full compromise of the affected device's security boundaries. The issue affects versions prior to 149.0.7827.53. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. No official remediation level or patch link is explicitly provided in the input data, but a vendor advisory URL is available for further details.

Successful exploitation allows a remote attacker who has compromised the renderer process to escape the sandbox environment, potentially gaining elevated privileges and full control over the affected device. This can lead to complete compromise of confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. No explicit patch or official fix is stated in the provided data. Users and administrators should monitor the vendor advisory for updates and apply any released patches promptly once available.