This vulnerability involves a use-after-free condition in the compositing subsystem of Google Chrome before version 146.0.7680.178. Exploitation requires prior compromise of the renderer process and can lead to sandbox escape, which significantly increases the attacker's privileges beyond the renderer sandbox. The vulnerability is triggered via a crafted HTML page that manipulates the compositing process. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required initially, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to sandbox escape from the renderer process, allowing an attacker to execute arbitrary code with higher privileges on the host system. This elevates the risk of full system compromise, data theft, or persistent malware installation. The vulnerability affects confidentiality, integrity, and availability of the affected system.

A fixed version of Google Chrome (146.0.7680.178 or later) addresses this vulnerability. Users and administrators should update to this version or later immediately to mitigate the risk. Since this is not a cloud service, remediation depends on applying the update on client systems. There is no indication of known exploits in the wild at this time.