CVE-2026-15119 describes a race condition in the GetUserMedia API within Google Chrome before version 150.0.7871.115. An attacker with control over the renderer process could exploit this race to perform a sandbox escape, which would undermine the browser's security boundaries. The vulnerability was publicly disclosed with a high severity rating by Chromium security. Although a vendor advisory link is provided, it does not explicitly confirm patch availability or remediation status. The affected versions include all Chrome releases before 150.0.7871.115.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox environment, potentially leading to greater control over the host system or execution of unauthorized code outside the browser sandbox. This elevates the risk of further system compromise beyond the browser context.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html for current remediation guidance. Users and administrators should update to Chrome version 150.0.7871.115 or later once confirmed patched. Until then, limit exposure by restricting untrusted content and renderer process compromises.