This vulnerability involves a use-after-free condition in the Viz component of Google Chrome before version 149.0.7827.53. Exploiting this issue requires prior compromise of the renderer process and could enable an attacker to perform a sandbox escape via a crafted HTML page. The issue is rated high severity with a CVSS 3.1 score of 8.3, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity. Google has released a stable channel update addressing this vulnerability.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the Chrome sandbox, potentially leading to elevated privileges and further system compromise. The impact includes full confidentiality, integrity, and availability loss within the affected environment. No known active exploits have been reported.

A fixed version of Google Chrome is available in the stable channel update 149.0.7827.53. Users and administrators should update to this version or later to remediate the vulnerability. Since this is a client-side application, no additional vendor-managed cloud remediation applies. Patch status is confirmed by the vendor advisory linked in the input data.