This vulnerability arises from uninitialized use in the Accessibility feature of Google Chrome on Windows versions before 147.0.7727.101. A remote attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, potentially gaining higher privileges or broader access than intended. The CVSS v3.1 base score is 8.3, indicating a high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction. The issue is categorized under CWE-457, indicating improper handling of uninitialized variables. The vendor advisory URL is provided but does not explicitly state patch availability or remediation details.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to elevated privileges or broader system compromise. The impact affects confidentiality, integrity, and availability at a high level. There are no known active exploits in the wild, reducing immediate risk, but the vulnerability remains significant due to the potential for sandbox escape.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted content and consider updating to the latest Chrome version once available. No specific temporary mitigations are detailed in the advisory.