This vulnerability involves a use-after-free condition in the Permissions handling of Google Chrome on Android before version 147.0.7727.101. Exploitation requires user interaction involving specific UI gestures on a maliciously crafted HTML page, potentially leading to arbitrary code execution. The vulnerability was publicly disclosed on April 15, 2026, with a high severity rating assigned by Chromium security. No CVSS score is available, and no direct patch or remediation level is stated in the provided data. The vendor advisory link may contain updated remediation information.

Successful exploitation could allow a remote attacker to execute arbitrary code on an affected device, potentially compromising the security and integrity of the user's environment. This requires user interaction and crafted content delivery. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Users should update to Chrome version 147.0.7727.101 or later once available. Until then, caution should be exercised when interacting with untrusted web content on affected versions.