This vulnerability is an out-of-bounds read in the GPU component of Google Chrome before version 148.0.7778.216. It enables a remote attacker, with control over the renderer process, to potentially perform a sandbox escape through a crafted HTML page. The sandbox escape could lead to elevated privileges beyond the renderer process. The CVSS 3.1 base score is 8.3, reflecting high impact and complexity requiring user interaction and high attack complexity. The issue was publicly disclosed with a vendor advisory linking to the Chrome stable channel update.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox, potentially gaining higher privileges on the host system. This could lead to full compromise of the affected system's confidentiality, integrity, and availability. No known exploits have been reported in the wild so far.

Google has released an update in Chrome version 148.0.7778.216 that addresses this vulnerability. Users and administrators should update to this version or later to mitigate the risk. Since this is not a cloud service, remediation depends on applying the update on client systems. Patch status is confirmed by the vendor advisory linked in the data.