This vulnerability arises from an inappropriate implementation in the V8 JavaScript engine used by Google Chrome before version 147.0.7727.55. It enables remote code execution inside the sandbox environment when a user visits a maliciously crafted HTML page. The CVSS vector indicates the attack requires no privileges but user interaction and can result in high confidentiality, integrity, and availability impacts. The issue is addressed by updating Chrome to version 147.0.7727.55 or later.

Successful exploitation allows remote attackers to execute arbitrary code within the sandboxed environment of the Chrome browser, potentially compromising confidentiality, integrity, and availability of the affected system. This could lead to unauthorized actions performed by the attacker under the context of the browser process. However, no active exploits have been reported in the wild as of the publication date.

Users and administrators should update Google Chrome to version 147.0.7727.55 or later, as detailed in the official Google Chrome stable channel update advisory (https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html). This update contains the fix for the vulnerability. No additional mitigation steps are indicated by the vendor advisory.