Google Chrome EUVD-2026-50917

Exploitation requires that the attacker has ALREADY compromised the Chrome renderer process - this is a sandbox-escape second stage, not an initial-access vector - and additionally requires the victim to load a crafted HTML page (UI:R). The specific vulnerable surface is the AI component reachable from the renderer, triggered via malformed untrusted input. Limiting factors: the mandatory pre-existing renderer compromise (typically needing a chained memory-corruption exploit), required user interaction of visiting a malicious page, and the desktop-stable Chrome build being older than 151.0.7922.72. These preconditions are why Google rates the Chromium severity 'Low' despite the 9.6 CVSS.

Signals conflict sharply and must be weighed together. The NVD CVSS of 9.6 (AV:N/AC:L/PR:N/UI:R/S:C, full C/I/A impact) looks critical, but the description explicitly requires 'a remote attacker who had compromised the renderer process' - a substantial precondition that AC:L understates; a sandbox escape is a second-stage exploit, not a standalone entry point. Google's own Chromium severity is 'Low', EPSS is 0.17% (7th percentile), and CISA SSVC records Exploitation: none and Automatable: no, though Technical Impact is total. Taken together this is a defense-in-depth boundary bug: dangerous only when chained to a prior renderer RCE, not a widely exploitable network-facing critical. The CVSS-vs-Chromium-severity gap should be read as scoring methodology difference, not evidence of imminent mass exploitation - patch it on the normal Chrome update cadence rather than as an emergency.

An attacker first compromises the Chrome renderer through a separate memory-corruption bug, then lures the victim to a crafted HTML page that feeds malformed input to the AI component, using that as a pivot to escape the sandbox into the higher-privileged browser process. No public exploit is identified at time of analysis, and the multi-stage requirement (renderer foothold plus user visiting the page) makes opportunistic exploitation unlikely.