This vulnerability arises from insufficient validation of untrusted input within the Linux Toolkit Theming feature of Google Chrome on Linux platforms. Specifically, it affects Chrome versions before 149.0.7827.115. An attacker who has already compromised the renderer process may exploit this flaw to perform a sandbox escape by leveraging a malicious file. The sandbox escape could lead to increased privileges or further compromise of the host system. The vulnerability is acknowledged by Google with a high severity rating, but no detailed CVSS score or explicit remediation status is provided in the input data. A vendor advisory URL is available for further details.

If exploited, this vulnerability could allow an attacker with control over the renderer process to break out of Chrome's sandbox on Linux, potentially leading to execution of arbitrary code with higher privileges on the host system. This increases the risk of system compromise beyond the browser sandbox containment. However, exploitation requires prior compromise of the renderer process.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01962725236.html for current remediation guidance. Since no official fix or remediation level is explicitly stated in the provided data, users should monitor the vendor advisory for updates and apply any forthcoming Chrome updates addressing this issue promptly.