The vulnerability is a use‑after‑free bug in the ANGLE graphics component of Google Chrome prior to version 150.0.7871.47 that allows a remote attacker who has compromised the renderer process to potentially escape the browser sandbox by loading a specially crafted HTML page. This flaw is classified as CWE‑416 and can lead to the execution of arbitrary code with the renderer’s privileges.

Google Chrome versions prior to 150.0.7871.47 are affected. The issue is exploitable only when the attacker can inject crafted HTML into the renderer process; no other external attack surfaces are mentioned in the description.

The CVSS score of 9.6 indicates a high‑severity vulnerability, yet the EPSS score of <1% reflects a low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation to date. The likely attack vector is a malicious HTML page rendered in a compromised renderer process, inferred from the description, and once triggered the attacker can execute code with the renderer’s privileges, potentially compromising the host system.