This vulnerability involves a use-after-free flaw in the Views component of Google Chrome on Windows platforms before version 151.0.7922.109. An attacker who convinces a user to perform certain UI gestures on a maliciously crafted HTML page may trigger heap corruption. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with network attack vector, high complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The vendor advisory URL is provided but does not explicitly state if a fix has been released.

Successful exploitation could allow a remote attacker to cause heap corruption, potentially leading to arbitrary code execution or denial of service on affected systems running vulnerable versions of Google Chrome on Windows. The vulnerability requires user interaction and specific UI gestures to be triggered.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html for current remediation guidance. Users and administrators should monitor this advisory for updates and apply any official fixes once available. Until then, exercise caution with untrusted web content and avoid engaging in suspicious UI interactions.