This vulnerability involves a use-after-free condition in the WebRTC implementation of Google Chrome before version 149.0.7827.53. Exploiting this flaw could enable remote code execution inside the sandboxed environment of the browser via a maliciously crafted HTML page. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. Google has published an advisory and released an update to fix this vulnerability.

Successful exploitation allows a remote attacker to execute arbitrary code within the sandbox of the affected Chrome browser, potentially compromising confidentiality, integrity, and availability of the user's environment. The attack requires user interaction (visiting a crafted HTML page) but no privileges or authentication. There are no reports of active exploitation in the wild.

Users should update Google Chrome to version 149.0.7827.53 or later, where this vulnerability is patched. The vendor advisory confirms that this update addresses the issue. No additional mitigations are indicated by the vendor.