This vulnerability in Google Chrome on Windows arises from insufficient validation of untrusted input within the Settings component. An attacker who has already compromised the renderer process could exploit this flaw by delivering a specially crafted HTML page to escape the sandbox environment, potentially gaining higher privileges or executing arbitrary code outside the sandbox. The issue affects versions prior to 150.0.7871.47. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox, undermining Chrome's security model and potentially leading to arbitrary code execution with elevated privileges. This could compromise the confidentiality, integrity, and availability of the affected system.

A fix is available in Google Chrome version 150.0.7871.47. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for detailed update instructions.