This vulnerability involves a use-after-free error in the Fonts handling code of Google Chrome on Linux prior to version 149.0.7827.53. Exploitation requires user interaction (UI:R) and can be triggered remotely via a crafted HTML page, allowing arbitrary code execution inside the sandbox. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor has released a stable channel update addressing this issue.

Successful exploitation could allow a remote attacker to execute arbitrary code within the sandboxed environment of Google Chrome on Linux, potentially leading to full compromise of the browser process. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability of the affected system. However, exploitation requires user interaction and delivery of a crafted HTML page. No known active exploits have been reported.

Google has released a stable channel update for Chrome that addresses this vulnerability. Users should update to version 149.0.7827.53 or later to remediate this issue. Since this is a client-side vulnerability in a desktop application, applying the official update is the recommended and effective mitigation. Patch status is confirmed by the vendor advisory linked.