This vulnerability involves a use-after-free condition in the WebRTC implementation of Google Chrome before version 147.0.7727.55. Exploitation requires user interaction (visiting a malicious HTML page) and could lead to arbitrary code execution within the sandbox environment. The CVSS vector indicates the attack can be performed remotely over the network without privileges and with low attack complexity, but requires user interaction. The vulnerability impacts confidentiality, integrity, and availability at a high level. Google has released an update to fix this issue as detailed in their official advisory.

Successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code inside the sandboxed environment of the browser. This could lead to compromise of browser security properties including confidentiality, integrity, and availability. However, exploitation requires user interaction and the attacker must convince the user to visit a crafted HTML page. There are no known exploits in the wild at the time of this report.

Google has released an official fix in Chrome version 147.0.7727.55. Users and administrators should update affected Chrome installations to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.