This vulnerability arises from insufficient policy enforcement in the DevTools component of Google Chrome versions before 150.0.7871.47. An attacker who has already compromised the renderer process could leverage this issue to perform a sandbox escape via a crafted HTML page, potentially gaining elevated privileges or broader system access. The CVSS 3.1 score of 9.6 reflects network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. The vulnerability is tracked as CWE-693 (Protection Mechanism Failure).

Successful exploitation could allow an attacker with control over the renderer process to escape the browser sandbox, potentially leading to arbitrary code execution with higher privileges and compromising the host system's security. This elevates the risk of system compromise beyond the browser sandbox boundary.

The vendor advisory linked does not explicitly state the availability of a patch or fix. The affected version is prior to 150.0.7871.47, implying that updating to version 150.0.7871.47 or later may remediate the issue. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance.