This vulnerability involves a use-after-free condition in the Payments feature of Google Chrome on Android before version 147.0.7727.101. Exploitation requires user interaction involving specific UI gestures on a maliciously crafted HTML page, potentially leading to arbitrary code execution. The vulnerability has been publicly disclosed but lacks detailed patch or remediation information in the provided data. The vendor advisory is available but does not explicitly state if a fix has been released.

If successfully exploited, this vulnerability could allow remote attackers to execute arbitrary code on affected devices running vulnerable versions of Chrome on Android. This could compromise the security and integrity of the affected system. However, no known active exploits have been reported, and the severity is rated medium by Chromium security.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Until an official fix is confirmed, users should avoid interacting with untrusted or suspicious web content that could trigger the vulnerability. Monitor official Google Chrome release notes for updates.