This vulnerability involves a use-after-free condition in the DevTools feature of Google Chrome before version 147.0.7727.117. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, which could lead to further compromise of the host system. The issue was publicly disclosed on April 23, 2026, with a high severity rating by Chromium security. No CVSS score or explicit remediation level is provided, but the vendor advisory points to a stable channel update that presumably fixes the vulnerability.

Successful exploitation requires prior compromise of the renderer process and could enable an attacker to escape the sandbox protections of Chrome, potentially leading to execution of arbitrary code outside the browser sandbox. This elevates the risk of system compromise beyond the browser context. There are no known exploits in the wild at the time of disclosure.

Google has released a stable channel update for Chrome (version 147.0.7727.117) that addresses this vulnerability. Users and administrators should update to this version or later to mitigate the risk. Since this is not a cloud service, remediation depends on applying the browser update. Patch status is not explicitly confirmed in the advisory text but the linked update strongly indicates an official fix is available.