This vulnerability involves a use-after-free condition in Blink, the rendering engine used by Google Chrome, affecting versions before 148.0.7778.96. Exploitation requires a user to visit a maliciously crafted HTML page, which can lead to arbitrary code execution within the sandbox environment. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, with low attack complexity, requiring user interaction, and results in high confidentiality, integrity, and availability impacts. The issue is publicly disclosed and patched in Chrome 148.0.7778.96.

Successful exploitation could allow an attacker to execute arbitrary code inside the sandboxed environment of the browser, potentially compromising confidentiality, integrity, and availability of the affected system. However, the attack requires user interaction (visiting a malicious page). There are no reports of active exploitation in the wild.

Google has released Chrome version 148.0.7778.96 which addresses this vulnerability. Users and administrators should update affected Chrome installations to this version or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the update. No additional mitigations are specified in the vendor advisory.