This vulnerability involves a heap buffer overflow in the WebML feature of Google Chrome before version 147.0.7727.55. Exploitation requires a user to visit a maliciously crafted HTML page, which can lead to arbitrary code execution. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges and requires user interaction. The impact affects confidentiality, integrity, and availability of the affected system. Google has released a stable channel update announcement referencing this issue, but the exact remediation status is not explicitly stated in the provided information.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on the victim's machine, potentially leading to full compromise of the affected system. The CVSS score of 8.8 reflects high impact on confidentiality, integrity, and availability. No known exploits are currently reported in the wild.

The vendor has published a stable channel update announcement for Google Chrome that addresses this vulnerability. Users and administrators should update to version 147.0.7727.55 or later to mitigate this issue. Patch status is not explicitly confirmed in the provided data, so checking the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for the latest remediation guidance is recommended.