This vulnerability involves a use-after-free condition in the Cast feature of Google Chrome before version 147.0.7727.138. An attacker positioned on the same local network segment could exploit this flaw by crafting malicious network traffic that triggers heap corruption. The issue was assigned a high severity rating by the Chromium security team. The vulnerability was publicly disclosed on April 28, 2026. Although a vendor advisory URL is provided, it does not explicitly confirm whether a fix has been released in the input data. The vulnerability does not have an associated CVSS score.

Successful exploitation could lead to heap corruption, which may result in arbitrary code execution or browser instability. The attack requires the attacker to be on the same local network segment, limiting the attack surface. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html for current remediation guidance. Users should update Google Chrome to version 147.0.7727.138 or later once confirmed. Until then, limiting exposure to untrusted local network segments may reduce risk.