This vulnerability involves a use-after-free condition (CWE-416) in the Proxy component of Google Chrome before version 147.0.7727.101. An attacker in a privileged network position could exploit this by crafting a malicious HTML page to trigger a sandbox escape, potentially leading to full compromise of the browser environment. The CVSS vector indicates network attack vector, high complexity, no privileges required, user interaction required, and a scope change with high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to escape the Chrome sandbox, compromising browser security and potentially gaining elevated control over the affected system. The impact includes full confidentiality, integrity, and availability loss within the browser context. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when browsing untrusted sites, especially in privileged network environments.