This vulnerability involves a use-after-free condition (CWE-416) in the Graphite subsystem of Google Chrome before version 147.0.7727.101. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, which could lead to full compromise of the browser environment. The issue is classified as high severity with a CVSS 3.1 score of 8.3, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity.

Successful exploitation could allow an attacker to escape the Chrome sandbox, potentially leading to execution of arbitrary code with elevated privileges outside the browser sandbox. This could compromise the host system's security. However, there are no known active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Users should update to Chrome version 147.0.7727.101 or later once confirmed. Until then, exercising caution with untrusted HTML content and limiting renderer process compromise risk are prudent.