The vulnerability allows an attacker who has already compromised the renderer process to send crafted network traffic that causes the process to execute arbitrary code outside the sandbox. This results in the ability to run code with elevated privileges on the affected system, potentially reading or modifying sensitive data, installing malware, or compromising the machine. The weakness aligns with CWE-59, indicating improper restriction of operations within memory bounds.

Google Chrome for macOS releases prior to version 157.0.8103.38 are affected. Users operating older stable channel builds remain at risk until they upgrade to the patched version.

Chromium rates this flaw as high severity. No EPSS score is publicly available, and the issue is not listed in the CISA KEV catalog. Attackers would need an initial foothold in the renderer process, which could be gained via other vulnerabilities or social engineering, and then direct malicious network traffic to trigger the exploit. The attack vector is inferred to be leveraged through network input that bypasses sandbox constraints, limiting the exploit to browsers that expose the renderer to external network connections.