This vulnerability involves a use-after-free condition (CWE-416) in the Prerender feature of Google Chrome before version 147.0.7727.101. Exploitation requires user interaction (UI:R) and network access (AV:N) with no privileges required (PR:N). Successful exploitation can lead to remote code execution with high impact on confidentiality, integrity, and availability. The CVSS vector indicates the attack surface is network-based with low attack complexity. The vulnerability is publicly disclosed but no official fix or remediation level is explicitly stated in the vendor advisory provided.

If exploited, this vulnerability allows remote attackers to execute arbitrary code on the affected system, potentially leading to full compromise of the user's environment. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability. However, no active exploitation has been reported so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Users and administrators should monitor this advisory closely and apply updates promptly once a fix is officially released. Until then, exercising caution with untrusted web content is advised.