This vulnerability is an uninitialized use issue in the ANGLE component of Google Chrome before version 150.0.7871.46. It allows a remote attacker, with control over the renderer process, to potentially perform a sandbox escape via a crafted HTML page. The sandbox escape could lead to elevated privileges and compromise of the host system. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor advisory linked corresponds to the Chrome stable channel update that addresses this issue.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the Chrome sandbox, potentially leading to full system compromise. The impact includes high confidentiality, integrity, and availability losses as indicated by the CVSS score of 8.3. No exploits are currently known to be active in the wild.

A fix is available in Google Chrome version 150.0.7871.46. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html provides official update information. No additional mitigations are indicated by the vendor advisory.