This vulnerability involves a use-after-free condition in the ANGLE graphics abstraction layer of Google Chrome on Windows platforms. Exploitation requires user interaction by visiting a maliciously crafted HTML page, which can lead to arbitrary code execution inside the browser sandbox. The issue is fixed in Chrome version 149.0.7827.53. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows remote attackers to execute arbitrary code within the sandboxed environment of the Chrome browser on Windows. This can lead to full compromise of the browser process, potentially allowing further attacks depending on sandbox escape capabilities. The vulnerability is rated high severity with a CVSS score of 8.8. No known active exploits have been reported.

Google has released a stable channel update for Chrome that fixes this vulnerability in version 149.0.7827.53. Users and administrators should update affected Chrome installations to this version or later to remediate the issue. Since this is a client-side vulnerability requiring user interaction, updating the browser is the primary mitigation. No additional vendor-recommended mitigations are indicated in the advisory.