This vulnerability involves type confusion in the V8 engine of Google Chrome before version 147.0.7727.55. Type confusion can cause the engine to misinterpret data types, potentially enabling remote code execution within the sandbox environment when a user visits a maliciously crafted HTML page. The issue is tracked as CWE-843 and has a CVSS 3.1 base score of 8.8, reflecting high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed and documented by Google, but explicit patch availability is not confirmed in the provided data.

Successful exploitation allows remote attackers to execute arbitrary code inside the Chrome sandbox, potentially compromising browser security and user data confidentiality, integrity, and availability. The high CVSS score reflects the critical nature of this vulnerability in a widely used browser component.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should monitor this advisory closely and apply updates promptly once a fix is officially released. Until then, exercising caution with untrusted web content is advised.