This vulnerability involves a use-after-free condition in the ANGLE graphics abstraction layer within Google Chrome before version 148.0.7778.216. Exploiting this flaw requires the attacker to have already compromised the renderer process, after which they can execute arbitrary code remotely by using a specially crafted HTML page. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows remote code execution within the context of the compromised renderer process, potentially leading to full control over the affected Chrome instance. This can result in confidentiality, integrity, and availability impacts as indicated by the CVSS score. No known exploits are reported in the wild, which may limit immediate risk but does not eliminate the threat.

A fixed version of Google Chrome (148.0.7778.216) has been released that addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the update on client devices. Patch status is confirmed by the vendor advisory linked in the input data.