This vulnerability in Google Chrome's V8 JavaScript engine prior to version 150.0.7871.46 allows remote attackers to potentially cause heap corruption by tricking users into specific UI gestures on a maliciously crafted HTML page. The issue is classified under CWE-122 (Heap-based Buffer Overflow). The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, no privileges, user interaction, and impacts confidentiality, integrity, and availability with high severity. The vendor advisory URL is provided but does not explicitly state patch availability or remediation level.

Successful exploitation could lead to heap corruption, which may allow an attacker to execute arbitrary code, cause denial of service, or compromise user data. The CVSS score of 8.8 reflects a high impact on confidentiality, integrity, and availability. However, no known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted web content and avoid engaging in unexpected UI gestures prompted by unknown sites.