This vulnerability involves a use-after-free condition in the GPU process of Google Chrome on Windows platforms before version 148.0.7778.179. Exploitation requires user interaction (visiting a malicious HTML page) and could lead to arbitrary code execution within Chrome's sandbox environment. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is necessary. Confidentiality, integrity, and availability impacts are all rated high.

Successful exploitation allows remote attackers to execute arbitrary code inside the sandboxed GPU process of Chrome, potentially compromising browser security and user data confidentiality, integrity, and availability. The vulnerability affects Windows users running vulnerable Chrome versions prior to 148.0.7778.179. No active exploits have been reported.

Google has released a stable channel update for Chrome version 148.0.7778.179 that addresses this vulnerability. Users should update to this version or later to remediate the issue. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated by the vendor.