This vulnerability arises from insufficient validation of untrusted input in the WebView component of Google Chrome on Android versions prior to 151.0.7922.72. An attacker who has already compromised the renderer process could exploit this flaw by crafting a malicious HTML page to perform a sandbox escape, potentially increasing their privileges or access beyond the renderer sandbox. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox environment, potentially leading to increased privileges or further compromise of the device. The impact is rated medium with limited confidentiality, integrity, and availability impact as per the CVSS score.

The vulnerability affects Google Chrome on Android versions prior to 151.0.7922.72. Users and administrators should update to version 151.0.7922.72 or later to remediate this issue. The vendor advisory linked does not explicitly state patch availability, but the presence of a fixed version indicates that updating to 151.0.7922.72 or newer addresses the vulnerability. No additional mitigation steps are specified by the vendor.