The flaw is an insufficient validation of untrusted input in Chrome for iOS's renderer component. A remote attacker who can gain control of the renderer process could deliver a malicious HTML page that exploits this defect to escape the browser's sandbox, potentially allowing execution of code with elevated privileges. The weakness is classified as CWE-20, Unvalidated Input.

Google Chrome for iOS releases older than 151.0.7922.72 are vulnerable; the defect is present in the Chrome browser app provided by Google for iOS devices.

With a CVSS score of 9.6 this issue is severe. The EPSS score is less than 1%, indicating a very low but non-zero likelihood of exploitation at the time of analysis. It is not listed in the CISA KEV catalog. An attacker would likely need to compromise the renderer process first, which could happen by visiting a malicious web page in Chrome for iOS. Once the renderer is compromised, a crafted HTML page could be used to escape the sandbox and execute higher-privilege code.