This vulnerability in Google Chrome's WebSockets implementation involves insufficient validation of untrusted input, which can be exploited by a remote attacker with control over the renderer process to perform a sandbox escape. The issue affects Chrome versions prior to 151.0.7922.72. The vulnerability is rated critical with a CVSS 3.1 score of 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. The vendor has published a stable channel update addressing this issue.

Successful exploitation allows an attacker who has compromised the renderer process to escape the sandbox, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected system.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for details.