This vulnerability involves a use-after-free condition in the Viz component of Google Chrome before version 147.0.7727.101. Exploitation requires that the attacker has already compromised the renderer process, after which they could leverage this flaw to escape the browser sandbox, potentially leading to higher privilege code execution. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to escape the Chrome sandbox from a compromised renderer process, potentially leading to arbitrary code execution with elevated privileges. This could compromise the confidentiality, integrity, and availability of the affected system. However, there are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome stable channel update blog post should be monitored for updates regarding an official fix. Until a patch is confirmed, users should exercise caution when interacting with untrusted web content and ensure Chrome is updated promptly once a fix is released.