This vulnerability involves an out-of-bounds read in the Dawn component of Google Chrome versions before 150.0.7871.46. Exploitation could enable a remote attacker to perform a sandbox escape via a specially crafted HTML page, compromising the browser's security boundaries. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor advisory references a stable channel update that presumably fixes this issue.

Successful exploitation could lead to a sandbox escape, allowing an attacker to break out of the browser's restricted environment and potentially execute arbitrary code or access sensitive information. The vulnerability affects confidentiality, integrity, and availability with high impact. No active exploitation has been reported at this time.

A fix is available in Google Chrome version 150.0.7871.46. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for detailed update instructions.