The vulnerability identified as CVE-2026-18002 involves insufficient validation of untrusted input in the Google Lens feature of Google Chrome before version 151.0.7922.72. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape using a specially crafted HTML page. This could potentially allow the attacker to break out of the restricted execution environment imposed by the sandbox. The Chromium security team rates this issue as low severity. No official patch or remediation details are provided in the input data, and no known exploitation has been observed.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to escape the sandbox environment, potentially increasing their privileges or access on the affected system. However, the severity is considered low, indicating limited impact or difficulty in exploitation. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users and administrators should monitor official Google Chrome security advisories for updates regarding this vulnerability. No specific mitigations are detailed in the available data.