This vulnerability involves a use-after-free condition in the Proxy module of Google Chrome before version 147.0.7727.101. An attacker positioned within a privileged network context could exploit this flaw by serving a specially crafted HTML page, potentially enabling sandbox escape. The CVSS vector indicates network attack vector with high confidentiality, integrity, and availability impact, requiring user interaction and high attack complexity. The vulnerability was publicly disclosed on April 15, 2026, with a CVSS score of 8.3, categorized as high severity.

Successful exploitation could allow an attacker to escape the Chrome sandbox, leading to full compromise of the browser process with high impact on confidentiality, integrity, and availability. This could enable execution of arbitrary code or other malicious actions within the context of the browser, significantly increasing the threat posed by malicious web content in a privileged network environment.

Users and administrators should update Google Chrome to version 147.0.7727.101 or later, as this version addresses the vulnerability. The vendor advisory linked (https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html) should be consulted for official patch details and update instructions. No other mitigations or temporary fixes are indicated in the provided data.