This vulnerability is an out‑of‑bounds write in the ANGLE graphics stack used by Google Chrome. The flaw, identified as CWE‑787, can let an attacker trigger a sandbox escape by loading a specially crafted HTML page, potentially allowing execution of code outside the browser’s sandbox. If exploited, the attacker could run arbitrary code on the victim’s system with the privileges of the browser process.

The issue affects all installations of Google Chrome with versions earlier than 151.0.7922.72. Systems that have not applied updates to at least that release are vulnerable. Based on the description, it is inferred that the affected releases are likely distributed in the stable channel for desktop, though this specific channel is not explicitly mentioned in the source data.

The CVSS score of 9.6 indicates a critical severity, while the EPSS score of <1% suggests exploit attempts are currently rare. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires a crafted HTML payload delivered to an unsuspecting user, making the attack vector remote via web content. Even without an active exploit, the high severity warrants prompt remediation.