An object lifecycle flaw in the Metrics component of Google Chrome allows a remote attacker who has already compromised the renderer process to escape the browser sandbox by serving a crafted HTML page. This type of vulnerability maps to CWE-20, indicating that improper input validation or resource handling can lead to privilege escalation. If exploited, the attacker can gain higher privileges within the host system and potentially execute arbitrary code.

The flaw is present in Google Chrome versions prior to 149.0.7827.155. Any systems running an older stable release of Chrome are susceptible until the security update that ships with 149.0.7827.155 or later is installed.

The EPSS score is reported as <1%, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited widespread exploitation to date. The attack requires the attacker to compromise the renderer process first, which typically implies a foothold gained through malicious web content or a compromised user session. Once the renderer is compromised, the attacker can deliver crafted HTML that triggers the object lifecycle issue, leading to a sandbox escape. The high severity rating issued by Chromium reflects the potential for remote code execution if the attacker proceeds beyond the initial escape.