This vulnerability involves an inappropriate implementation in the Passwords feature of Google Chrome before version 151.0.7922.72. A remote attacker can exploit this flaw by delivering a crafted HTML page that triggers arbitrary code execution within the browser's sandbox environment. The sandbox limits the impact of the exploit, which contributes to the low severity rating. No detailed exploitation techniques or impact beyond sandboxed code execution are described. The vulnerability is publicly known but no known exploits in the wild have been reported. The vendor has published an advisory linked to a stable channel update, implying a fix is available in or after version 151.0.7922.72.

Allows remote code execution inside the sandbox via crafted HTML content. The sandboxed environment limits the potential damage, resulting in a low severity classification. No evidence of exploitation in the wild has been reported.

A fix is available in Google Chrome version 151.0.7922.72. Users should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory for details: https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html