This vulnerability involves insufficient validation of untrusted input in the WebNN feature of Google Chrome on Windows. Specifically, a heap buffer overflow can be triggered by a crafted HTML page if the attacker has already compromised the renderer process. This could lead to heap corruption, impacting confidentiality, integrity, and availability of the affected system. The issue is tracked as CWE-122 (Heap-based Buffer Overflow).

Successful exploitation could allow an attacker to execute arbitrary code or cause a denial of service by corrupting heap memory within the renderer process. The CVSS score of 8.8 indicates high impact on confidentiality, integrity, and availability. However, exploitation requires prior compromise of the renderer process and user interaction (UI required).

The vulnerability affects versions prior to 150.0.7871.47. Users should update to version 150.0.7871.47 or later where the issue is fixed. The vendor advisory linked confirms the availability of a stable channel update addressing this issue. No additional mitigation steps are indicated.