This vulnerability involves a use-after-free condition (CWE-416) in the Forms feature of Google Chrome before version 147.0.7727.101. Exploitation requires user interaction (UI:R) and network access (AV:N), and it can lead to full confidentiality, integrity, and availability compromise within the sandboxed environment. The CVSS vector indicates low attack complexity and no privileges required, making it a significant security risk if exploited. The vendor advisory is available but does not specify patch or remediation details.

Successful exploitation could allow a remote attacker to execute arbitrary code inside the Chrome sandbox, potentially leading to full compromise of the affected browser process. This includes unauthorized disclosure, modification, or destruction of data within the sandboxed environment. However, there are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Until official fixes are confirmed, users should exercise caution when visiting untrusted websites and consider updating Chrome to the latest available version once updates are released.