This vulnerability involves a use-after-free condition (CWE-416) in the Navigation subsystem of Google Chrome before version 147.0.7727.55. Exploitation requires user interaction (UI:R) and can be triggered remotely over the network (AV:N) without privileges (PR:N). Successful exploitation could lead to arbitrary code execution inside the sandbox, impacting confidentiality, integrity, and availability of the affected system. The CVSS vector indicates low attack complexity and high impact. The vendor advisory URL is provided but does not explicitly state if a fix has been released.

If exploited, this vulnerability allows remote attackers to execute arbitrary code within the sandboxed environment of Google Chrome, potentially compromising the browser's security and leading to data exposure, modification, or denial of service. The high CVSS score reflects the critical nature of these impacts. However, no active exploitation has been reported so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when browsing untrusted websites and avoid interacting with suspicious HTML content. Monitor official Google Chrome release notes for updates on patches addressing this vulnerability.