This vulnerability is a use-after-free flaw in the mobile version of Google Chrome on iOS prior to version 148.0.7778.96. Exploitation requires user interaction through specific UI gestures on a maliciously crafted HTML page, enabling remote code execution. The CVSS v3.1 score is 7.5, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction. The vulnerability was publicly disclosed with no confirmed remediation level or patch status from the vendor advisory. No known active exploitation has been reported.

Successful exploitation could allow a remote attacker to execute arbitrary code on the affected device, potentially compromising user data and device integrity. The vulnerability affects confidentiality, integrity, and availability of the system. However, exploitation requires user interaction via specific UI gestures, which may limit the attack surface. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome on iOS to version 148.0.7778.96 or later once available. Until then, avoid interacting with untrusted or suspicious web content that may trigger the vulnerability. Monitor official Google Chrome release notes and security advisories for updates.