This vulnerability involves type confusion in the CSS component of Google Chrome before version 147.0.7727.55. An attacker could exploit this by tricking a user into installing a crafted malicious Chrome extension, potentially causing heap corruption. The issue is classified under CWE-843 (Type Confusion). The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. No official remediation level or patch availability is stated in the provided data, but a vendor advisory URL is given for further details.

Successful exploitation could lead to heap corruption, which may allow an attacker to execute arbitrary code or cause a denial of service. The attack requires user interaction in the form of installing a malicious extension. The vulnerability affects confidentiality, integrity, and availability of the affected system. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should avoid installing untrusted Chrome extensions and follow best practices for extension management.