This vulnerability involves a use-after-free condition in the WebMIDI implementation of Google Chrome before version 147.0.7727.138. Exploitation requires prior compromise of the renderer process and could lead to sandbox escape, increasing the attacker's privileges beyond the renderer sandbox. The CVSS 3.1 base score is 8.3, reflecting high impact on confidentiality, integrity, and availability, with network attack vector, high attack complexity, no privileges required, and user interaction needed. The vendor advisory confirms a stable channel update that mitigates this vulnerability.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox, potentially leading to full system compromise or further privilege escalation. The vulnerability affects confidentiality, integrity, and availability of the affected system. No known active exploitation has been reported.

Google has released a stable channel update for Chrome version 147.0.7727.138 that addresses this vulnerability. Users and administrators should update Chrome to this version or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the vendor's update. Patch status is confirmed by the vendor advisory.