This vulnerability involves a use-after-free condition in the Autofill feature of Google Chrome before version 151.0.7922.72. Exploitation requires a user to visit a specially crafted HTML page, which can trigger arbitrary code execution inside the sandboxed environment of the browser. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges and requires user interaction. The impact includes complete confidentiality, integrity, and availability compromise of the affected system within the sandbox context. Google published an advisory and released an update to fix this vulnerability.

Successful exploitation allows a remote attacker to execute arbitrary code inside the sandboxed environment of Google Chrome, potentially compromising confidentiality, integrity, and availability of the browser process. However, the attack requires user interaction (visiting a malicious page). There are no known exploits in the wild at the time of this report.

Users should update Google Chrome to version 151.0.7922.72 or later, where this vulnerability is fixed. No other mitigations are indicated by the vendor advisory. Patch status is confirmed by the official Google Chrome stable channel update.