A buffer overflow was discovered in ANGLE, a component of Google Chrome, which can be triggered by a crafted HTML page. If an attacker has compromised the renderer process, the overflow may allow execution of arbitrary code outside the sandbox. The flaw carries a low severity rating according to Chromium's internal scoring.

Google Chrome versions earlier than 155.0.8059.39 are vulnerable. Any systems running these releases are at risk, regardless of operating system.

Exploitation requires control of the renderer process, which typically follows a prior compromise. The CVSS score of 8.3 reflects a high severity, while the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting a modest risk of widespread exploitation. The potential to escape the sandbox means that compromised renderers could impact confidentiality, integrity, and availability of the host system.