This vulnerability is a use-after-free in the V8 engine component of Google Chrome versions before 151.0.7922.72. It enables a remote attacker, with control over the renderer process, to cause out-of-bounds memory access by delivering a specially crafted HTML page. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The flaw is addressed in Chrome version 151.0.7922.72.

Successful exploitation could allow an attacker to execute arbitrary code or cause a denial of service by accessing memory out of bounds. This impacts confidentiality, integrity, and availability of the affected system. However, exploitation requires prior compromise of the renderer process and user interaction.

Google has released Chrome version 151.0.7922.72 which addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. Patch status is confirmed by the vendor advisory. No additional mitigations are specified.