This vulnerability involves a use-after-free condition in the WebRTC implementation of Google Chrome on Windows platforms before version 148.0.7778.96. Exploitation requires a remote attacker to craft a malicious HTML page that, when loaded by the victim's browser, can trigger arbitrary code execution inside the sandbox environment. The issue was publicly disclosed and patched by Google in the stable channel update to version 148.0.7778.96. No CVSS score is provided, but the Chromium security team rates the severity as high.

Successful exploitation allows remote code execution within the sandbox of the affected Chrome browser on Windows. This could enable attackers to run arbitrary code with the privileges of the browser process, potentially leading to further compromise depending on sandbox escape conditions. There are no reports of active exploitation in the wild at the time of disclosure.

Users should update Google Chrome on Windows to version 148.0.7778.96 or later, where this vulnerability has been addressed. The vendor advisory confirms that the issue is fixed in this stable release. No additional mitigation steps are indicated by the vendor.