This vulnerability affects the WebView in Google Chrome on Android before version 149.0.7827.53. A remote attacker with control over the renderer process could exploit an implementation flaw to perform a sandbox escape via a crafted HTML page. This could potentially allow the attacker to break out of the restricted execution environment imposed by the sandbox. The issue was publicly disclosed on June 4, 2026, but no detailed CVSS score or remediation level is provided in the data. The vendor advisory link is available but does not explicitly confirm patch availability or mitigation steps.

If successfully exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox environment, potentially leading to increased privileges or access beyond the renderer process. However, the severity is rated medium, indicating a moderate level of risk. There are no known exploits in the wild at the time of this report.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official fixes are confirmed, users should update to Chrome version 149.0.7827.53 or later once available. No other specific mitigation recommendations are provided by the vendor advisory.