This vulnerability involves a use-after-free condition in the Views component of Google Chrome on Mac platforms before version 147.0.7727.138. An attacker can trigger heap corruption remotely by delivering a specially crafted HTML page, potentially leading to arbitrary code execution or other impacts. The CVSS 3.1 vector indicates the attack requires no privileges and only user interaction, with network attack vector and high impact on confidentiality, integrity, and availability. The vulnerability is tracked under CWE-416 (Use After Free).

Successful exploitation could lead to heap corruption allowing an attacker to execute arbitrary code or cause denial of service on affected Mac systems running vulnerable Chrome versions. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html for current remediation guidance. Until a patch is confirmed, users should exercise caution when browsing untrusted websites and consider updating to the latest Chrome version once available.