This vulnerability is a race condition in the V8 JavaScript engine of Google Chrome that allows an attacker to execute arbitrary code inside the browser's sandbox when a specially crafted HTML page is loaded. The flaw can lead to execution of attacker‑supplied code within the browser context, potentially compromising the integrity of the user’s machine or the confidentiality of local data.

The affected product is Google Chrome versions prior to 151.0.7922.72. Any installation of Chrome older than that release is vulnerable.

The CVSS score of 7.5 indicates a high severity, but the EPSS score of less than 1% suggests that exploitation is considered unlikely at present. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is a remote attacker providing a malicious HTML page, which the user loads in the browser. The race condition is triggered during parsing or execution of that page, enabling the attacker to bypass the sandbox and run code with elevated privileges.