This vulnerability concerns insufficient validation of untrusted input in the WebAuthn component of Google Chrome before version 151.0.7922.72. An attacker who has compromised the renderer process could exploit this flaw by delivering a specially crafted PDF file to perform a sandbox escape. The sandbox escape could allow the attacker to break out of the restricted environment of the renderer process, potentially leading to further system compromise. The vulnerability is classified as low severity by the Chromium security team. No CVSS score is provided, and no official remediation level or patch availability is explicitly stated in the provided data. The vendor advisory URL is available but does not explicitly confirm patch status in the input.

A remote attacker with prior access to the renderer process could leverage this vulnerability to escape the sandbox environment via a crafted PDF file. This could lead to increased privileges or broader system access beyond the renderer sandbox. However, the severity is considered low, indicating limited impact or difficulty in exploitation. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Since the vulnerability affects versions prior to 151.0.7922.72, updating to version 151.0.7922.72 or later is recommended if confirmed by the vendor advisory. No other specific mitigations are provided in the input data.