This vulnerability involves a use-after-free condition in the Core of Google Chrome on iOS before version 149.0.7827.53. Exploitation requires that the attacker has already compromised the renderer process and can craft malicious HTML content to trigger a sandbox escape. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The issue is addressed in Chrome version 149.0.7827.53.

Successful exploitation could allow an attacker to escape the sandbox environment from the renderer process, potentially leading to full compromise of the browser process and elevated privileges on the affected device. This could result in unauthorized access to sensitive information, code execution, and disruption of service. However, no active exploitation has been reported.

A fix is available in Google Chrome version 149.0.7827.53 for iOS. Users and administrators should update to this version or later to remediate the vulnerability. The vendor manages remediation for this product via updates, and applying the official update is the recommended action. Patch status is confirmed by the vendor advisory linked.