This vulnerability arises from insufficient validation of untrusted input in the New Tab Page component of Google Chrome before version 149.0.7827.103. Exploitation requires prior compromise of the renderer process, after which an attacker could leverage a crafted HTML page to perform a sandbox escape, potentially increasing their privileges or access beyond the renderer sandbox. The issue is recognized as high severity by Chromium security but lacks a CVSS score and explicit remediation details in the provided advisory.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to break out of the sandbox environment, potentially leading to greater control over the host system or access to sensitive resources. However, exploitation requires initial renderer compromise, limiting the attack vector to scenarios where the attacker already has some level of access within the browser process.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Until an official fix is confirmed, users should ensure they are running the latest stable version of Google Chrome and follow any updates from Google regarding this vulnerability.