A flaw in the TabStrip authorization logic allows a remote attacker who has already compromised the renderer process and uses social engineering to deliver a specially crafted web page to potentially execute code outside Chrome’s sandbox. The vulnerability stems from improper authorization checks, enabling the attacker to perform actions that are normally restricted to privileged code paths.

The flaw affects Google Chrome on desktop platforms, specifically any installation of Chrome prior to revision 152.0.7977.75. Users running those versions are at risk until they upgrade.

Chromium labels the severity as Medium and lists it as a moderate impact. The EPSS score is not available, and the issue is not currently catalogued in the CISA KEV. Exploitation requires an attacker to first compromise the renderer process and then lures a user to open a maliciously crafted HTML page, so the overall likelihood is limited but plausible. Successful exploitation would give the attacker code execution outside the sandbox with the privileges of the renderer.