This vulnerability arises from insufficient validation of untrusted input in the Skia graphics library used by Google Chrome. An attacker who has already compromised the renderer process could exploit this flaw to perform a sandbox escape, thereby gaining higher privileges or access beyond the renderer sandbox. The issue affects Chrome versions prior to 150.0.7871.47. Although no known exploits are reported in the wild, the vulnerability is rated critical with a CVSS score of 9.6. The vendor advisory linked indicates a stable channel update addressing this issue, but explicit patch availability or remediation level is not stated in the provided data.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox, potentially leading to full system compromise or unauthorized access to sensitive information. The vulnerability impacts confidentiality, integrity, and availability of the affected system. No known exploits in the wild have been reported at this time.

A fix is available in Google Chrome version 150.0.7871.47. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update. Patch status is not explicitly confirmed beyond the version number; check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for the latest remediation guidance.