A type‑confusion flaw in Chrome Tabs allows a remote attacker who has already compromised the renderer process to supply a crafted HTML page that may cause the renderer to escape its sandbox. This flaw can lead to elevated operating‑‑843 error‑type handling, and results in unauthorized code execution on the host machine.

All desktop installations of Google Chrome prior to version 150.0.7871.47, regardless of operating system, are vulnerable. Users running those unpatched versions on Windows, web content triggers a compromise of the renderer process.

The EPSS score of <1% indicates a low probability of real‑world exploitation, and the vulnerability is not listed in the CISA KEV catalog. Nonetheless, the CVSS score of 8.3 reflects significant impact. Exploitation requires prior compromise of the renderer process, which may originate from malicious web pages or other host process weaknesses. While a fully remote, zero‑click exploit is not guaranteed, the potential for sandbox escape makes this vulnerability noteworthy for environments that load untrusted content.