This vulnerability involves a use-after-free condition in the Video component of Google Chrome on Windows platforms before version 147.0.7727.101. An attacker who has already compromised the renderer process can exploit this flaw by delivering a specially crafted HTML page, resulting in out-of-bounds memory access. The CVSS 3.1 score of 8.8 reflects high impact across confidentiality, integrity, and availability. The issue is publicly documented and a vendor advisory from Google confirms a stable channel update has been released to fix the vulnerability.

Successful exploitation of this vulnerability can lead to remote code execution or other memory corruption consequences, impacting the confidentiality, integrity, and availability of the affected system. Since the attacker must have compromised the renderer process first, this vulnerability can be leveraged to escalate privileges or further compromise the system. No active exploitation has been reported so far.

Google has released a stable channel update for Chrome version 147.0.7727.101 that addresses this vulnerability. Users and administrators should update affected Chrome installations to this version or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the update on client systems. Patch status is confirmed by the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html.