This vulnerability involves an inappropriate implementation in the V8 JavaScript engine component of Google Chrome versions before 147.0.7727.55. It enables remote code execution inside the sandbox environment when a user visits a maliciously crafted HTML page. The CVSS v3.1 base score is 8.8, indicating high severity, with attack vector network, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. The issue is tracked as CWE-284 (Improper Access Control). The vendor advisory URL is provided but does not explicitly confirm patch status or remediation level.

Successful exploitation could allow an attacker to execute arbitrary code within the sandboxed environment of the Chrome browser, potentially compromising confidentiality, integrity, and availability of the affected system. The impact is rated high based on the CVSS score of 8.8. There are currently no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 147.0.7727.55 or later once available. Until then, exercise caution when visiting untrusted websites and avoid opening suspicious HTML content.