An out‑of‑bounds read in the Permissions component is found in Google Chrome before build 157.0.8103.38. A legitimate renderer process that has already been compromised could use this flaw to read memory outside its intended bounds, potentially leading to execution of arbitrary code outside the sandbox. The vulnerability is classified as high severity by the Chromium security team.

Google Chrome browsers with versions prior to 157.0.8103.38 are affected. Any installation of Chrome that has not applied the latest patch from the stable channel is vulnerable.

The flaw requires an attacker to have already compromised the renderer process, typically through a malicious web page or extension. Once that condition is met, the out‑of‑bounds read can be leveraged to escape the sandbox and execute arbitrary code. The EPSS score is not available, the CVSS metric is not provided in the summary, and the issue has not been listed in the CISA KEV catalog. The risk remains significant for systems that expose less‐trusted content to the browser, but an initial compromise is a prerequisite for exploitation.