This vulnerability in Google Chrome's Media component arises from insufficient validation of untrusted input, specifically in versions before 150.0.7871.47. An attacker who has compromised the renderer process could leverage a crafted video file to escape the sandbox, potentially gaining higher privileges or executing code outside the intended sandbox restrictions. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

Successful exploitation could allow an attacker to escape the sandbox environment from the renderer process, leading to potential full system compromise or unauthorized code execution with elevated privileges. The impact affects confidentiality, integrity, and availability of the affected system. However, exploitation requires prior compromise of the renderer process and user interaction.

The vendor advisory linked indicates a stable channel update for desktop Chrome but does not explicitly confirm patch availability or remediation level in the provided data. Therefore, patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until confirmed patched, users should update to the latest Chrome version once available and avoid opening untrusted video files.