This vulnerability involves out of bounds read and write in the V8 JavaScript engine component of Google Chrome versions before 148.0.7778.96. Exploitation requires a remote attacker to deliver a specially crafted HTML page that triggers arbitrary code execution inside the sandbox environment of the browser. The issue was publicly disclosed with high severity by the Chromium project. No CVSS score or detailed remediation level is provided in the available data. The vendor advisory link points to a Chrome stable channel update announcement, implying a fixed version is available at or after 148.0.7778.96.

Successful exploitation allows remote code execution within the sandboxed environment of Google Chrome, potentially compromising browser security and user data confidentiality. The sandbox limits the scope of impact but arbitrary code execution remains a serious threat. No known active exploits have been reported at this time.

Users should update Google Chrome to version 148.0.7778.96 or later, as this version addresses the vulnerability. The vendor advisory linked corresponds to a stable channel update, indicating an official fix is available. Patch status is confirmed by the presence of the fixed version number. No additional mitigation steps are indicated by the vendor advisory.