This vulnerability arises from insufficient validation of untrusted input in the BFCache component of Google Chrome before version 151.0.7922.72. An attacker with control over the renderer process could leverage this flaw to perform a sandbox escape by delivering a specially crafted HTML page. The sandbox escape could allow the attacker to break out of the restricted environment, potentially leading to higher privilege code execution. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges of low, user interaction required, scope changed, and high impact on confidentiality and integrity but no impact on availability.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to unauthorized access to system resources or higher privilege code execution. This elevates the risk of further compromise beyond the renderer sandbox. There are no reports of active exploitation in the wild.

Google has released Chrome version 151.0.7922.72 which addresses this vulnerability. Users and administrators should update to this version or later to mitigate the risk. No additional mitigation steps are indicated by the vendor advisory.