This vulnerability involves a use-after-free condition in the navigation functionality of Google Chrome before version 147.0.7727.55. Exploitation requires a remote attacker to deliver a specially crafted HTML page that triggers arbitrary code execution inside the sandboxed environment of the browser. The issue is recognized by Chromium security with a medium severity rating. The vendor advisory references a stable channel update but does not explicitly confirm patch availability or remediation level. No CVSS score is assigned to this vulnerability.

Successful exploitation could allow remote code execution within the sandboxed environment of Google Chrome, potentially enabling an attacker to run arbitrary code. However, the impact is limited by the sandbox containment. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Until official confirmation of a fix, users should update to the latest Chrome version when available. No vendor advisory explicitly states that no action is required or that the issue is already mitigated.