This vulnerability involves a use-after-free condition in the Skia graphics library within Google Chrome before version 148.0.7778.96. An attacker with control over the renderer process can exploit this flaw to potentially perform a sandbox escape, which could lead to elevated privileges beyond the browser sandbox. The issue is triggered via crafted HTML content. The CVSS 3.1 base score is 8.3, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox protections of Chrome, potentially leading to greater control over the host system. This elevates the risk from a renderer compromise to a full system compromise. There are no reports of active exploitation in the wild as of the published date.

Google has released an update in Chrome version 148.0.7778.96 that fixes this vulnerability. Users and administrators should update to this version or later to mitigate the risk. Since this is a client-side vulnerability in a desktop browser, applying the official update is the primary remediation step. No additional mitigations are specified by the vendor advisory.