This vulnerability involves out-of-bounds memory access (CWE-125) in the ANGLE graphics engine within Google Chrome versions before 151.0.7922.72. Exploitation could enable a remote attacker to escape the browser sandbox, potentially leading to arbitrary code execution or system compromise. The vulnerability is triggered via a specially crafted HTML page. The CVSS v3.1 base score is 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. The vendor advisory confirms the fix is included in Chrome 151.0.7922.72.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox, leading to full compromise of the affected system's confidentiality, integrity, and availability. This could enable arbitrary code execution outside the browser sandbox, increasing the risk of further system-level attacks.

Users and administrators should update Google Chrome to version 151.0.7922.72 or later to remediate this vulnerability. The vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html confirms this update addresses the issue. No additional mitigation steps are indicated by the vendor.