A critical sandbox escape vulnerability in Google Chrome on Android allows a remote attacker to compromise the renderer process and bypass security boundaries.

This flaw involves insufficient validation of untrusted input within the GPU subsystem. It requires the attacker to have already compromised the renderer process, at which point they can use a crafted HTML page to perform a sandbox escape.

The vulnerability carries a CVSS score of 8.3, classifying it as high severity. A successful exploit allows an attacker to break out of the browser sandbox, potentially leading to unauthorized access to the underlying Android operating system, data theft, or complete device compromise.

Immediate Action: Update Google Chrome for Android to version 151.0.7922.72 or later immediately.

Proactive Monitoring: Monitor device logs for anomalous process activity or unexpected crashes originating from the Chrome renderer.

Compensating Controls: Ensure that Android security patches are up to date and utilize mobile device management (MDM) policies to restrict the execution of untrusted or unverified applications.

Public Exploit Available: No (no confirmed public exploit exists in current data).

Given the high CVSS score and the nature of sandbox escapes, this vulnerability poses a severe risk to mobile endpoints. Administrators and users must prioritize the update to version 151.0.7922.72 to neutralize this critical escape vector.