This vulnerability involves a use-after-free condition in the HTML processing of Google Chrome before version 151.0.7922.137. Exploitation requires a remote attacker to supply a crafted HTML page that triggers the flaw, enabling arbitrary code execution within the sandbox environment of the browser. The issue is recognized as high severity by the Chromium security team. No known exploits in the wild have been reported at the time of publication. The vendor advisory references a stable channel update that presumably includes a fix.

Successful exploitation allows remote code execution inside the sandbox of Google Chrome, potentially compromising the security of the browser environment. However, the sandbox limits the scope of impact to the browser context. No active exploitation has been reported.

A fix is available in Google Chrome version 151.0.7922.137. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01815628406.html for detailed update instructions.