This vulnerability arises from insufficient validation of untrusted input in the printing functionality of Google Chrome on Windows versions before 151.0.7922.72. An attacker who has already compromised the renderer process could leverage this flaw to perform a sandbox escape by delivering a specially crafted HTML page. The sandbox escape could allow the attacker to execute code outside the restricted renderer environment, increasing the impact of an initial compromise. The issue is classified with a medium severity and a CVSS 3.1 base score of 5.8, reflecting network attack vector, high attack complexity, no privileges required, user interaction required, scope change, and low impact on confidentiality, integrity, and availability.

The vulnerability allows a remote attacker with control over the renderer process to potentially escape the sandbox, which could lead to execution of code with higher privileges than normally permitted within the sandbox. This escalation increases the risk of further system compromise beyond the renderer process. However, exploitation requires prior compromise of the renderer process and user interaction, limiting the ease of exploitation. No active exploitation in the wild has been reported.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked provides official confirmation of the patch. No additional mitigation steps are indicated by the vendor advisory.