This vulnerability arises from insufficient validation of untrusted input within the WebView component of Google Chrome on Android devices. An attacker could exploit this by delivering a specially crafted HTML page that may enable sandbox escape, compromising the security boundaries of the browser environment. The vulnerability affects Chrome versions before 151.0.7922.72. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow a remote attacker to escape the sandbox environment in Chrome on Android, potentially leading to increased privileges or unauthorized access beyond the browser sandbox. This could compromise the security model of the browser and the device. However, no active exploitation has been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome stable channel update blog post should be monitored for official fixes. Until a patch is confirmed, users should exercise caution with untrusted web content and avoid interacting with suspicious links or pages.