This vulnerability involves a use-after-free condition in the Bluetooth functionality of Google Chrome on Mac platforms. It allows remote code execution if a user installs a crafted malicious Chrome extension. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The affected versions are those before 148.0.7778.216, which suggests that the fixed version is 148.0.7778.216 or later. The vendor advisory URL points to a Chrome stable channel update announcement, but does not explicitly confirm patch status in the provided data.

Successful exploitation can lead to arbitrary code execution on the affected Mac system running Google Chrome, compromising confidentiality, integrity, and availability of the system. This could allow an attacker to take control of the affected system via a malicious Chrome extension. No known active exploits have been reported.

Users should update Google Chrome on Mac to version 148.0.7778.216 or later to remediate this vulnerability. The vendor advisory linked corresponds to a stable channel update, which typically includes security fixes. Patch status is not explicitly confirmed in the advisory content provided, so users should verify the update includes this fix. Until updated, users should avoid installing untrusted Chrome extensions.