An inappropriate implementation in Skia, the graphics library used by Google Chrome on Android, permits a remote attacker who has already compromised the renderer process to escape the browser’s sandbox. By serving a crafted HTML page the attacker can potentially execute arbitrary code with higher privileges, jeopardizing the confidentiality, integrity, and availability of the device. Chromium security staff have rated the flaw as Critical.

The vulnerability affects Google Chrome on Android devices running versions prior to 148.0.7778.216. Any installation of Chrome that has a renderer component older than this build is susceptible.

The EPSS score is not available and the vulnerability is not listed in CISA KEV, yet the CVSS base score of 8.7 indicates a high severity. Exploitation requires the attacker to already control the renderer process, typically through a malicious web page or phishing attack that loads crafted content. Once that condition is met, the Skia bug can be triggered to escape the sandbox, giving the attacker significant escape capabilities.