This vulnerability is a use‑after‑free flaw in the Glic component of Google Chrome that can allow an attacker who has first compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The flaw permits code paths that bypass the browser’s sandbox boundaries, enabling the attacker to gain elevated privileges relative to the renderer. The weakness is identified as CWE‑416 and is classified as high severity by Chromium, owing to the potential privilege escalation it provides. No claim is made regarding arbitrary code execution beyond this sandbox escape, as the CVE does not explicitly state that capability.

Users Google Chrome versions earlier than 150.0.7871.47 are affected. The problem exists in stable channel releases before that revision. Anyone who visits an infected or malicious web page in those versions is at risk until the issue is patched.

The EPSS score for this vulnerability is < 1%, and it is not listed in the CISA KEV catalog. Chromium rating, with a CVSS score of 8.3. The likely attack vector is from a malicious HTML page that is rendered in a renderer process that has already been compromised by another vector. The vulnerability requires the renderer process to be exploited first; once this is achieved, the use‑after‑free can lead to a sandbox escape, potentially permitting the attacker to execute further operations with elevated privileges. The reliance on a prior renderer compromise limits the attack surface, but the existence of the flaw still constitutes a serious concern for users who can download or view malicious content.