This vulnerability involves a use-after-free condition in the PrivateAI feature of Google Chrome before version 147.0.7727.55. Exploitation requires user interaction involving specific UI gestures on a maliciously crafted HTML page, which could lead to a sandbox escape. The vulnerability is acknowledged by Google with a medium severity rating. The vendor advisory URL suggests that a stable channel update addressing this issue may exist, but the exact patch status is not explicitly stated in the provided data.

A successful exploit could allow a remote attacker to escape the Chrome sandbox, potentially increasing the attacker's privileges beyond the browser's normal restrictions. This could lead to further compromise of the host system. However, exploitation requires user interaction with specific UI gestures, which may limit the attack's practicality. No known active exploits have been reported.

Check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for the latest update and patch information. Since the vulnerability affects versions prior to 147.0.7727.55, updating Chrome to version 147.0.7727.55 or later is recommended if available. Patch status is not explicitly confirmed in the provided data; therefore, verify the vendor advisory for current remediation guidance.