This vulnerability involves a use-after-free condition in the Views component of Google Chrome before version 148.0.7778.96. Exploitation requires user interaction in the form of installing a crafted malicious Chrome extension, which can then lead to arbitrary code execution within the browser context. The vulnerability is recognized by the Chromium security team with a medium severity rating. No CVSS score is available, and no explicit remediation level or patch availability is confirmed in the provided information.

Successful exploitation could allow an attacker to execute arbitrary code in the context of the affected Chrome browser by tricking a user into installing a malicious extension. This could compromise the user's browser environment and potentially lead to further system compromise depending on the user's privileges. However, exploitation requires user interaction and installation of a malicious extension, limiting the attack vector. No known active exploits have been reported.

The vendor has published a stable channel update advisory for Chrome (https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html). Although the explicit patch status is not confirmed in the provided data, users should update Chrome to version 148.0.7778.96 or later to address this vulnerability. Until updated, users should avoid installing untrusted Chrome extensions. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.