This vulnerability involves a use-after-free condition in the Input handling of Google Chrome before version 151.0.7922.72. Exploiting this flaw enables remote attackers to execute arbitrary code inside the browser's sandbox environment via a specially crafted HTML page. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at the time of publication. The vendor advisory confirms the release of a stable update to fix this issue.

Successful exploitation could allow remote attackers to execute arbitrary code within the sandboxed environment of the browser, potentially compromising confidentiality, integrity, and availability of the affected system. However, exploitation requires user interaction (e.g., visiting a malicious web page). No active exploitation has been reported.

Users should update Google Chrome to version 151.0.7922.72 or later, where this vulnerability is fixed. The vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html provides official update information. No other mitigations are specified.