Inappropriate implementation in DevTools allows a remote attacker who has already compromised the renderer process to potentially escape the sandbox by loading a crafted HTML page. The vulnerability is classified as High severity by Chromium and enables an attacker to gain higher privileges than the sandbox permits, potentially executing arbitrary code on the host system.

Google Chrome versions prior to 149.0.7827.115 are affected. Users should verify their installed Chrome version and upgrade if older than this release.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. However, the high severity rating implies significant risk for systems exposed to untrusted web content. The attack vector requires a remote attacker to trick a compromised renderer process, likely through a malicious website or local exploitation combined with a web interface. The absence of a CVSS score limits precise numerical risk assessment, but the known high severity suggests that exploitation could lead to privilege escalation.