This vulnerability in Google Chrome's New Tab Page arises from insufficient validation of untrusted input. An attacker who has already compromised the renderer process could exploit this flaw by crafting a malicious HTML page to perform a sandbox escape, thereby potentially gaining higher privileges or executing code outside the intended sandbox environment. The issue affects Chrome versions prior to 149.0.7827.103. The CVSS v3.1 base score is 8.3, reflecting network attack vector with high complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to escape the Chrome sandbox from the renderer process, potentially leading to arbitrary code execution with elevated privileges. This compromises the security boundaries designed to isolate web content and protect the host system, resulting in a high impact on confidentiality, integrity, and availability of the affected system.

A fix is available in Google Chrome version 149.0.7827.103. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked provides official update information. No additional mitigation steps are indicated beyond applying the update.