Use‑after‑free in the Views component of Google Chrome allows a remote attacker who convinces a user to perform specific UI gestures to execute arbitrary code via a crafted HTML page. The flaw can lead to full code execution with the same privileges as the user, and it is classified as high severity by Chromium.

Google Chrome browsers with releases earlier than 148.0.7778.216 are vulnerable. The vulnerability exists in the stable channel of the desktop application and impacts the Views rendering engine.

Based on the description, the attack vector requires user interaction—an attacker must persuade a user to engage in certain UI gestures, implying that exploitation depends on social engineering or malicious web content. The CVSS score of 7.5 indicates high severity, while the EPSS score of less than 1% suggests a low probability of exploitation in the general population. The flaw is not listed in the CISA KEV catalog, and there is no evidence of known public exploitation. Nonetheless, the combination of high impact and the possibility of user‑style exploitation warrants prompt remediation.