Integer overflow in the V8 JavaScript engine of Google Chrome allows a remote attacker to trigger arbitrary code execution within a sandboxed process through a crafted HTML page. The flaw, classified under CWE-472, could be exploited to execute malicious code that might bypass or escape the browser's sandbox, effectively compromising the victim system's confidentiality and integrity.

Google Chrome desktop versions prior to 149.0.7827.53 are affected. Users of earlier builds must check that their browser versions are out of scope for this vulnerability.

The attack vector involves delivering a malicious HTML page to the vulnerable browser. Although the EPSS score is not available and the vulnerability is not listed in CISA KEV, the CVSS score of 8.8 indicates a high severity, suggesting a pronounced risk for exploitation. Current public data do not indicate active exploitation, but the potential for such exploitation remains high due to the nature of the flaw.