The vulnerability is a use‑after‑free flaw located in the ANGLE graphics subsystem of Google Chrome. When a renderer process is already compromised, a malicious HTML page can trigger the flaw and cause the renderer to escape the Chrome sandbox, allowing the attacker to execute code with elevated privileges on the host. This memory‑corruption issue is classified as CWE‑416 and negatively impacts system integrity. The flaw carries a high severity rating.

Any installation of Google Chrome older than version 151.0.7922.72 is affected. The defect resides in the ANGLE component used by Chrome’s rendering engine.

The CVSS score of 9.6 indicates a severe potential impact. However, the EPSS score of less than 1 % suggests that actual exploitation is currently unlikely. The vulnerability is not listed in the CISA KEV catalog, further indicating that no widespread exploitation has been observed. Attackers would need to first compromise the renderer process and then deliver a crafted HTML page to trigger the use‑after‑free, after which a sandbox escape could occur.