An attacker who has already compromised the Chrome renderer process can craft an HTML page that exploits insufficient validation of untrusted input in the Accessibility module. The flaw allows the attacker to exit the renderer sandbox, potentially executing code with higher privileges. This leads to significant compromises of confidentiality, integrity, and availability, as the flaw is a classic input validation failure (CWE‑20).

Google Chrome for Android versions earlier than 151.0.7922.72 are affected. The vulnerability resides in the Accessibility component and requires a prematurely compromised renderer process, meaning only browsers running those older versions with the default sandboxing configuration are at risk unless additional mitigations are in place.

The CVSS score of 9.6 indicates a high severity vulnerability. The EPSS score is less than 1%, suggesting that at present exploitation is unlikely. Based on the description, the likely attack vector is the delivery of a malicious HTML page that targets the Accessibility input handling, but the attacker must first have control over the renderer process. The flaw is not listed in the CISA KEV catalog, but its high severity and potential for privilege escalation warrant prompt remediation.