This vulnerability involves a use-after-free condition (CWE-416) in the DevTools feature of Google Chrome before version 147.0.7727.117. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, which could lead to execution of arbitrary code outside the browser sandbox. The issue is significant due to the potential for full system compromise if exploited. The CVSS vector indicates the attack requires no privileges but does require user interaction and results in complete confidentiality, integrity, and availability impact.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox protections of Chrome, potentially leading to arbitrary code execution on the host system with elevated privileges. This poses a critical risk to system security and user data confidentiality, integrity, and availability. No public exploits are currently known.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_22.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted web content and consider limiting access to DevTools or disabling it if feasible. Monitor the vendor advisory for updates on patch availability.