This vulnerability involves out-of-bounds read and write operations in the ANGLE graphics engine within Google Chrome versions before 150.0.7871.47. An attacker with control over the renderer process could leverage this flaw to escape the browser sandbox, potentially leading to full system compromise. The CVSS 3.1 base score is 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. The vulnerability is tracked as CWE-787 (Out-of-bounds Write). The vendor advisory is available but does not explicitly state patch or fix status.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox, potentially gaining elevated privileges and executing arbitrary code outside the browser's restricted environment. This poses a critical risk to system security, affecting confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted web content and consider applying any available Chrome updates promptly once released.