This vulnerability involves type confusion in the V8 engine of Google Chrome before version 147.0.7727.101. Type confusion can lead to out of bounds memory access, which may allow an attacker to execute arbitrary code or cause a denial of service. The issue is triggered remotely via a crafted HTML page, requiring user interaction. The CVSS vector indicates the attack can be performed over the network with low complexity and no privileges, but requires user interaction. The vulnerability affects the Chrome desktop browser and is categorized under CWE-843 (Type Confusion).

Successful exploitation could allow an attacker to execute arbitrary code, compromise browser security, and impact confidentiality, integrity, and availability of the affected system. The CVSS score of 8.8 reflects a high impact. There are no reports of active exploitation in the wild currently.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites and avoid interacting with suspicious content. Monitor the vendor advisory for updates regarding patches or mitigations.