This vulnerability involves a use-after-free condition in Blink, the rendering engine used by Google Chrome. An attacker can exploit this by crafting a malicious HTML page that triggers the use-after-free, enabling arbitrary code execution inside the browser's sandbox environment. The issue affects Chrome versions prior to 147.0.7727.55. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability, with network attack vector and no privileges required but user interaction needed. The vendor advisory linked indicates a stable channel update addressing this issue.

Successful exploitation allows remote attackers to execute arbitrary code within the sandboxed environment of the browser, potentially compromising confidentiality, integrity, and availability of the affected system. The high CVSS score (8.8) indicates a significant security risk if exploited. However, no known active exploits have been reported.

A fix is available in Google Chrome version 147.0.7727.55. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for detailed patch information and update instructions.