This vulnerability involves an integer overflow in the WebRTC implementation of Google Chrome before version 147.0.7727.55. Exploitation can lead to an out-of-bounds memory write, which may be leveraged by a remote attacker to compromise the browser's security. The CVSS vector indicates the attack requires no privileges but does require user interaction. The impact includes high confidentiality, integrity, and availability consequences. The vendor advisory URL is provided but does not explicitly state patch availability in the input data.

Successful exploitation can result in arbitrary memory corruption, potentially allowing remote code execution or browser compromise. The CVSS score of 8.8 reflects high impact on confidentiality, integrity, and availability. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Until confirmation of a patch, users should exercise caution when visiting untrusted websites and avoid interacting with suspicious content that might trigger the vulnerability.