This vulnerability is a use‑after‑free in the Dawn rendering engine that may allow an attacker who has already compromised the renderer process to escape the browser sandbox with a crafted HTML page. The flaw exists in Chrome versions prior to 149.0.7827.53 and permits the execution of arbitrary code or privilege escalation within the host system. The weakness is CWE‑416.

The affected product is Google Chrome, particularly the desktop stable channel versions earlier than 149.0.7827.53. The issue is present only on systems running the affected release before the chromium patch. Users of Chrome on Desktop should verify their version against the release notes linked in the references.

The CVSS score is 8.3. EPSS is unavailable, but the flaw is classified by Chromium as High severity, meaning it could be exploited by an attacker who already controls the renderer. The vulnerability is not listed in the CISA KEV catalog. Attackers would need to perform an initial compromise of the renderer process, after which a crafted HTML page could trigger the use‑after‑free to break out of the sandbox. The lack of publicly available exploitation guidance suggests the exploitation may require significant effort.