A flaw in the untrusted input validation of the ANGLE graphics driver in Google Chrome allows a remote attacker to potentially execute code outside the browser sandbox by serving a maliciously crafted HTML page. This weakness (CWE‑20, CWE‑1286) can compromise the confidentiality, integrity, and availability of the host system. The vulnerability is triggered by an attacker delivering specially crafted content to a vulnerable Chrome user, an inference based on the description, enabling a sandbox escape and possible full‑system compromise.

Google Chrome browsers built before version 149.0.7827.53 are affected. Users should verify their installed version and update accordingly.

The vulnerability carries a CVSS score of 9.6, indicating a high severity rating. The EPSS score of <1% suggests a very low but non‑zero likelihood of exploitation, and the CVE is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker would need to create a malicious HTML page and entice a user or a vulnerable web page to load it in the affected browser. This remote attack vector could be delivered via compromised websites or phishing emails, posing a significant threat to systems running an outdated Chrome browser.