This vulnerability in Google Chrome on Android arises from insufficient validation of untrusted input in the GPU subsystem. It allows a remote attacker, with control over the renderer process, to potentially perform a sandbox escape by delivering a specially crafted HTML page. The affected version is prior to 151.0.7922.72. The vulnerability was publicly disclosed on July 30, 2026, with a high severity rating by Chromium security. No CVSS score or explicit remediation level is provided in the source data. The vendor advisory URL is available but does not explicitly confirm patch status in the provided data.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to escape the sandbox, potentially gaining higher privileges and increasing the impact of the initial compromise. This could lead to further unauthorized actions within the affected device's browser environment.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted content and consider updating to the latest Chrome version once available.