This vulnerability involves a use-after-free condition in the Cast feature of Google Chrome before version 147.0.7727.101. Exploitation requires user interaction (visiting a malicious HTML page) and can lead to remote code execution. The CVSS vector indicates it is remotely exploitable over the network without privileges and with low attack complexity, causing high impact on confidentiality, integrity, and availability. The vulnerability is tracked as CWE-416 (Use After Free).

Successful exploitation allows a remote attacker to execute arbitrary code on the affected system, potentially leading to full compromise of the user's environment. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability.

The vendor advisory linked does not explicitly state the availability of a patch or remediation. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Until official confirmation, users should avoid visiting untrusted or suspicious websites that could trigger this vulnerability.