This vulnerability involves insufficient validation of untrusted input within the Feedback feature of Google Chrome versions before 147.0.7727.138. An attacker who has compromised the renderer process could leverage this flaw to escape the browser's sandbox environment by delivering a specially crafted HTML page. The sandbox escape could lead to increased privileges or broader system compromise beyond the renderer process. The issue was publicly disclosed on April 28, 2026, with a vendor advisory linked but without explicit patch or remediation details.

If exploited, this vulnerability could allow an attacker with control over the renderer process to break out of the sandbox containment, potentially leading to execution of arbitrary code with higher privileges on the host system. This elevates the risk of further system compromise beyond the browser sandbox. However, there are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html for current remediation guidance. Until official fixes are confirmed and applied, users should exercise caution when interacting with untrusted content and consider limiting exposure to potentially malicious web pages. No vendor advisory states that no action is required or that the issue is already mitigated.