This vulnerability is a use‑after‑free flaw in Chrome’s core on iOS. When a renderer process is already compromised, an attacker can host a specially crafted HTML page that triggers the memory bug, potentially breaking out of the renderer sandbox. The resulting sandbox escape allows execution of arbitrary code with elevated privileges, impacting confidentiality, integrity, and availability of the device. The weakness corresponds to CWE‑416, a classic memory corruption issue.

Google Chrome on iOS versions earlier than 149.0.7827.53 are affected. The flaw is present in the stable channel for iOS; versions 149.0.7827.53 and newer contain the fix. No other variants or platforms are listed.

Chromium classifies the issue as high severity, with a CVSS score of 8.3. EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires a compromised renderer, but the code‑path to escape the sandbox is fully exercised by a maliciously crafted HTML document. Attackers would need to deliver this page to the user’s device, typically via a malicious or compromised website. Given the limited vector and lack of publicly available exploits, the immediate risk is moderate, but the potential impact of sandbox escape is significant.