This vulnerability involves type confusion in the V8 engine of Google Chrome before version 148.0.7778.216. An attacker can exploit this by tricking a user into installing a crafted malicious Chrome extension, which then enables arbitrary code execution inside Chrome's sandbox. The issue is classified with a high severity level and a CVSS score of 7.5, reflecting its potential impact on confidentiality, integrity, and availability. The vendor has released a stable update to fix this vulnerability.

Successful exploitation allows arbitrary code execution within the sandboxed environment of Chrome via a malicious extension. This can compromise the confidentiality, integrity, and availability of the affected system. However, exploitation requires user interaction in the form of installing a malicious extension. There are no reports of active exploitation in the wild at this time.

A stable channel update for Google Chrome version 148.0.7778.216 or later addresses this vulnerability. Users and administrators should update Chrome to this version or later to remediate the issue. Since this is not a cloud service, patching the client software is required. No additional mitigation steps are indicated by the vendor advisory.