A use-after-free flaw in Chrome for iOS before version 149.0.7827.53 allows an attacker to execute arbitrary code on a victim’s device by delivering a specially crafted HTML page. The flaw arises when the browser accesses freed memory after the page’s resources have been released, leading to memory corruption that an attacker can exploit to run malicious code. This is a critical vulnerability, classified as such by Chromium’s security severity ratings.

Affected vendor: Google; product: Google Chrome for iOS. The vulnerability applies to any install of Chrome for iOS that is older than version 149.0.7827.53, including all releases earlier in the 149.0.x branch.

The vulnerability’s CVSS score is not publicly available, but it is marked as critical by Chromium, indicating a high severity. No EPSS data was provided, and the issue is not listed in the CISA KEV catalog. Attackers can exploit the flaw remotely by merely hosting a malicious HTML page that the victim’s browser will load. Once executed, the attacker can run arbitrary code with the privileges of the browser process, potentially compromising the entire device.