This vulnerability arises from insufficient validation of untrusted input within the Reading Mode feature of Google Chrome versions before 149.0.7827.53. An attacker who has compromised the renderer process could exploit this flaw to perform a sandbox escape via a specially crafted HTML page. The sandbox escape could allow the attacker to break out of the restricted execution environment, potentially leading to further system compromise. The vulnerability is classified as medium severity by Chromium security. The vendor advisory URL is provided but does not explicitly confirm patch availability or remediation status in the input data.

If exploited, this vulnerability could allow an attacker with control over the renderer process to escape the sandbox, potentially increasing the scope of compromise beyond the renderer sandbox. This could lead to execution of arbitrary code with higher privileges or access to restricted system resources. However, exploitation requires prior compromise of the renderer process, limiting the initial attack vector. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update Google Chrome to version 149.0.7827.53 or later once the update is available. Until then, no specific mitigations are detailed in the provided data.