This vulnerability is a use-after-free in the Web Authentication feature of Google Chrome versions prior to 151.0.7922.109. Exploitation could allow a remote attacker to perform a sandbox escape via a crafted HTML page, potentially leading to full compromise of the browser environment. The CVSS 3.1 base score is 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed and patched in Chrome 151.0.7922.109.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox, potentially gaining elevated privileges and executing arbitrary code outside the browser's restricted environment. This compromises the confidentiality, integrity, and availability of the affected system.

A fix is available in Google Chrome version 151.0.7922.109. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html for detailed update instructions.