This vulnerability is an out-of-bounds write in the ANGLE graphics layer of Google Chrome for Windows. An attacker delivering a specially crafted HTML page could exploit the memory corruption to escape the browser sandbox, potentially allowing arbitrary code execution and full system compromise. The weakness is classified as CWE-787, a common buffer over-read/out-of-bounds memory corruption flaw.

Google Chrome for Windows versions prior to 151.0.7922.72 are affected. The issue arises in the ANGLE integration and impacts all builds of the stable channel released before the mentioned revision.

With a CVSS score of 9.6 the vulnerability is considered critical. The EPSS score of less than 1% indicates a low but non‑zero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a remote attacker serving the malicious page, requiring only that a user opens or views it in the affected browser.