This vulnerability arises from inadequate enforcement of navigation policies in Google Chrome's renderer process, enabling a remote attacker with renderer compromise to potentially escape the sandbox. The sandbox escape could lead to elevated privileges and broader system compromise. The issue affects versions of Chrome prior to 151.0.7922.109. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor advisory is available but does not explicitly state patch or fix status.

Successful exploitation could allow an attacker who has already compromised the renderer process to escape the sandbox, potentially leading to full system compromise. This impacts confidentiality, integrity, and availability of the affected system. No active exploitation has been reported to date.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html for current remediation guidance. Until a patch is confirmed, users should exercise caution with untrusted content and consider applying any available updates promptly once released.