This vulnerability arises from insufficient validation of untrusted input within the codecs component of Google Chrome versions before 151.0.7922.109. Exploiting this flaw could enable a remote attacker to escape the browser's sandbox environment via a specially crafted HTML page, potentially leading to full system compromise. The CVSS 3.1 base score is 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed with a vendor advisory link but lacks explicit patch or remediation details in the provided data.

Successful exploitation could allow an attacker to escape the Chrome sandbox, compromising the security boundaries designed to isolate web content. This may lead to unauthorized access to system resources, data disclosure, modification, or denial of service. The vulnerability affects confidentiality, integrity, and availability at a high level. No active exploitation has been reported so far.

The vendor advisory from Google is available but does not explicitly confirm patch availability or remediation steps in the provided data. Patch status is not yet confirmed — check the Google Chrome releases blog at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html for current remediation guidance. Users and administrators should monitor official channels and apply updates promptly once confirmed.