This vulnerability is a use‑after‑free condition in the Media component of Google Chrome that enables an attacker who has already compromised the renderer process to escape the browser sandbox. If the sandbox escape succeeds, the attacker could gain higher privileges on the operating system, potentially compromising the entire machine. The flaw is classified as CWE‑416 (Use After Free) and is considered high severity with a CVSS score of 8.3.

The flaw affects Google Chrome on Windows platforms when the browser version is older than 151.0.7922.72. Users running any patch level before that release are susceptible; it specifically targets the Media module inside the rendering engine.

The EPSS score is reported as less than 1%, indicating a low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Nevertheless, a remote attacker must first gain control of the renderer process via a crafted HTML page or malicious content; once that condition is met, the sandbox escape becomes possible. The high CVSS rating reflects the significant impact that could result if the attacker successfully bypasses the sandbox, making it a high‑priority issue for patch management and threat mitigation.