This vulnerability arises from insufficient validation of untrusted input in the Text component of Google Chrome on Android versions before 150.0.7871.47. An attacker who has already compromised the renderer process could exploit this flaw by delivering a specially crafted HTML page to perform a sandbox escape. This could lead to full compromise of the browser environment, affecting confidentiality, integrity, and availability. The issue is tracked as CWE-20 (Improper Input Validation). Although the CVSS score is 9.6 (critical), no explicit vendor remediation level or patch link is provided in the data. The vendor advisory URL points to a Chrome stable channel update blog, but patch status is not explicitly confirmed in the provided data.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox, potentially gaining higher privileges or executing arbitrary code outside the browser sandbox. This impacts confidentiality, integrity, and availability of the affected system. The vulnerability is critical with a CVSS score of 9.6.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until a patch is confirmed, users should exercise caution with untrusted content and consider limiting exposure to potentially malicious web pages. No official fix or temporary workaround is explicitly stated in the provided data.