This vulnerability is a use-after-free in the WebRTC implementation of Google Chrome before version 148.0.7778.96. Exploitation requires user interaction (visiting a malicious HTML page) and could result in arbitrary code execution within the sandboxed environment of the browser. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed and patched in Chrome 148.0.7778.96.

Successful exploitation can lead to arbitrary code execution inside the sandboxed environment of Google Chrome, potentially compromising the confidentiality, integrity, and availability of the affected system. Since the attack requires user interaction and targets a widely used browser component, the risk is significant but mitigated by the sandbox containment. No active exploitation has been reported so far.

Google has released an official fix in Chrome version 148.0.7778.96. Users and administrators should update affected Chrome installations to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update on client systems. There is no indication from the vendor advisory that additional mitigation steps are required.