This vulnerability involves a use-after-free condition in the WebView component of Google Chrome on Android devices before version 147.0.7727.138. Exploitation requires a crafted HTML page that can trigger arbitrary code execution inside the sandboxed environment of the browser. The issue was publicly disclosed on April 28, 2026, and is rated as high severity by Chromium security. The vendor advisory is available but does not specify patch or remediation details. The vulnerability affects the specified Chrome Android versions only and is not related to cloud services.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code within the sandbox of the affected Chrome WebView on Android devices. This could potentially lead to unauthorized actions or compromise of the browser environment. However, no known exploits in the wild have been reported, and the impact is limited to affected versions prior to 147.0.7727.138.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes for updates addressing this vulnerability and apply updates promptly once available.