This vulnerability involves a use-after-free condition in the Animation subsystem of Google Chrome before version 147.0.7727.138. Exploitation requires a remote attacker to deliver a crafted HTML page that triggers the flaw, potentially enabling arbitrary code execution inside the browser's sandbox environment. The issue was publicly disclosed on April 28, 2026, with Google releasing a stable channel update that presumably addresses the problem. No CVSS score or explicit remediation level is provided in the source data, and no known exploits in the wild have been reported.

Successful exploitation could allow remote code execution within the sandboxed environment of Google Chrome, potentially compromising the security of the affected system. However, no known active exploits have been reported. The impact is considered high severity by Chromium security standards.

Google has released a stable channel update for Chrome that likely includes a fix for this vulnerability in version 147.0.7727.138. Users should update to this version or later to mitigate the risk. Patch status is not explicitly confirmed in the advisory, so users should verify that their Chrome installation is at or above the fixed version. No additional mitigation steps are specified by the vendor.