The vulnerability is a heap buffer overflow in the Dawn graphics engine used by Google Chrome prior to version 151.0.7922.72. A crafted HTML page can trigger the overflow, potentially allowing an attacker to escape the sandbox and execute code within the browser context. The weakness corresponds to CWE‑122 and CWE‑787.

This flaw affects Google Chrome on supported platforms, including Windows, macOS, and Linux, for versions prior to 151.0.7922.72. The vendor documentation does not explicitly list all platforms, so this scope is inferred from the product description.

The CVSS score of 9.6 indicates high severity, while the EPSS score of less than 1% suggests a low probability of exploitation at this time. The vulnerability is not listed in CISA KEV, indicating no known widespread exploitation. A crafted HTML page can trigger the overflow, potentially allowing an attacker to escape the sandbox and execute code within the browser context. The likely attack vector is remote, via a maliciously crafted HTML page served to the victim’s browser.