This vulnerability involves a use-after-free condition in Google Chrome for iOS before version 147.0.7727.138. An attacker can trigger heap corruption remotely by crafting a malicious HTML page that exploits this memory management flaw. The issue is recognized as critical by Chromium security, indicating a high potential impact if exploited. No CVSS score or detailed technical exploit information is provided. The vendor advisory is available but does not explicitly confirm patch availability or remediation steps.

Successful exploitation could lead to heap corruption, which may allow remote code execution or other severe impacts on the affected iOS Chrome browser. However, no known exploits in the wild have been reported, and the exact impact depends on exploitation success. The vulnerability affects users running Chrome versions prior to 147.0.7727.138 on iOS devices.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html for current remediation guidance. Users should update to Chrome version 147.0.7727.138 or later once confirmed available. Until then, no specific mitigation steps are provided by the vendor.