The vulnerability arises from insufficient validation of untrusted input in the Linux Toolkit Theming component of Google Chrome on Linux. The flaw allows a remote attacker who has already compromised the renderer process to potentially escape the browser sandbox by loading a malicious file. This gives the attacker the possibility to execute code with higher privileges, elevating from the confined renderer process to system-level access. The weakness corresponds to CWE‑20 and CWE‑1289, reflecting input validation failures.

Affected vendors: Google. Product: Google Chrome for Linux. Versions prior to 149.0.7827.115 are vulnerable. No specific sub‑versions or other products were mentioned. Users on earlier Chrome releases that have not applied the latest update are at risk.

The CVSS score is 8.3, indicating a high severity according to Chromium. The EPSS score is < 1%, indicating a very low but non-zero exploitation probability. The vulnerability is not listed in the CISA KEV catalog. The attack requires that the attacker already controls the renderer process, which would typically come from a separate compromise via a web page or malicious extension. Once that condition is met, the attacker can trigger the sandbox escape by presenting a crafted file to the rendering engine. Because remediation is available through a routine Chrome update, the risk is effectively mitigated once the patch is installed.