Chrome notifications lack proper validation of untrusted data, allowing a malicious PDF viewed in the browser to exploit a flaw that may enable a sandbox escape. The weakness is a classic input validation issue (CWE-20) and could let an attacker gain privileges beyond the confined renderer process. This elevates the threat to potential arbitrary code execution on the host system.

Google Chrome versions earlier than 151.0.7922.72 on desktop platforms are affected. Users of Windows, macOS, and Linux running these versions should consider themselves vulnerable until the latest stable release is installed.

The CVSS score of 9.6 indicates critical severity, but the EPSS score of <1% suggests that exploitation opportunities are currently low. The vulnerability is not listed in the CISA KEV catalog, and cracking the sandbox requires a crafted PDF file that the renderer process processes after a prior compromise. Attackers would need to trick a user into opening a malicious PDF while Chrome is running, the resulting flaw could then lift sandbox restrictions and expose system resources.