The vulnerability is a type‑confusion bug in ANGLE, a graphics abstraction layer used by Google Chrome. A maliciously crafted HTML page can cause the browser to misinterpret object types, potentially allowing the attacker to perform a sandbox escape. The defect is identified as a Medium severity issue by Chromium.

Google Chrome browsers older than version 150.0.7871.47 on the stable channel desktop edition are potentially vulnerable. No evidence suggests other vendors or product lines are affected.

The flaw can be triggered by a remote attacker via a specially crafted HTML page. No CVSS or EPSS score is published, and it is not listed in the CISA KEV catalog. The release notes indicate a Medium severity rating in Chromium; however, the specific impact remains a sandbox escape, which can elevate privileges from the browser process. This represents a meaningful risk if conditions are met.