This vulnerability is an object lifecycle issue in the WebRTC implementation of Google Chrome before version 151.0.7922.72. It allows a remote attacker to potentially exploit heap corruption by crafting a malicious HTML page. The vulnerability is identified as CWE-416, indicating a use-after-free condition. The CVSS v3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. The vulnerability requires no privileges and can be triggered via user interaction (UI required).

Successful exploitation could lead to heap corruption, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The CVSS score of 8.8 indicates high impact on confidentiality, integrity, and availability. However, no active exploitation in the wild has been reported at this time.

The vendor has published a stable channel update advisory for Google Chrome but has not explicitly confirmed the availability of a patch in the provided data. Users should update to version 151.0.7922.72 or later once confirmed by the vendor advisory. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance.