This vulnerability involves a use-after-free condition in the Prerender feature of Google Chrome before version 147.0.7727.101. Exploitation requires a user to visit a specially crafted HTML page, which can lead to remote code execution. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts confidentiality, integrity, and availability at a high level. The issue is classified as critical by Chromium security.

Successful exploitation allows remote attackers to execute arbitrary code on the affected system, potentially leading to full compromise of the user's environment. The vulnerability affects confidentiality, integrity, and availability of the system running the vulnerable Chrome version. No known active exploits have been reported.

Google has released an update in Chrome version 147.0.7727.101 that addresses this vulnerability. Users and administrators should update to this version or later to mitigate the risk. Since this is not a cloud service, remediation depends on applying the browser update. Patch status is confirmed by the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html.