This vulnerability involves a heap buffer overflow in the ANGLE graphics engine within Google Chrome on Windows platforms before version 148.0.7778.216. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, which could lead to elevated privileges or further system compromise. The issue is addressed in Chrome version 148.0.7778.216, indicating that earlier versions are vulnerable. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker who has compromised the renderer process to escape the Chrome sandbox on Windows, potentially leading to full system compromise. The impact includes high confidentiality, integrity, and availability loss as indicated by the CVSS score. There are no reports of active exploitation in the wild as of the published date.

Google has released Chrome version 148.0.7778.216 which addresses this vulnerability. Users and administrators should update affected Chrome installations to this version or later to mitigate the risk. Patch status is not explicitly confirmed in the advisory excerpt provided, so users should consult the official Google Chrome release blog for confirmation and further details. Until updated, users should exercise caution when interacting with untrusted web content, especially if the renderer process could be compromised.