This vulnerability involves a use-after-free condition in Google Chrome's Extensions subsystem affecting versions before 151.0.7922.137. Exploitation requires user interaction to install a crafted malicious extension, which then enables arbitrary code execution inside the sandbox environment. The issue was publicly disclosed with a high severity rating by Chromium security. The vendor advisory linked corresponds to a stable channel update announcement but does not explicitly confirm if the vulnerability is fixed in version 151.0.7922.137 or later.

Successful exploitation allows an attacker to execute arbitrary code inside the Chrome sandbox, which could lead to unauthorized actions within the browser context. The attack requires user interaction in the form of installing a malicious extension. There is no indication of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01815628406.html for current remediation guidance. Users should update to the latest stable Chrome version once the fix is confirmed. Until then, avoid installing untrusted extensions.