The vulnerability is a use‑after‑free bug in the MimeHandlerView component of Google Chrome, which allows a remote attacker to trigger arbitrary code execution in the browser’s sandbox environment through a specially crafted HTML page. The flaw exploits a dangling pointer after the MimeHandlerView object has been freed, enabling the attacker to perform operations that would otherwise be confined to the sandbox. An attacker could gain complete control over the sandboxed process, potentially leaking sensitive data, modifying the browsing session, or foisting further attacks on the user’s system.

Chrome browsers released before the 149.0.7827.53 patch are affected. The issue applies to the stable channel of Google Chrome for desktop platforms. Production installations that have not yet received the 149.0.7827.53 update remain vulnerable.

The vulnerability has a CVSS score of 8.8, indicating a high severity rating. It is rated as a remote code execution vector, though no EPSS value is available and it is not listed in the CISA KEV catalog. The attack can be carried out by hosting a malicious HTML file or tricking a user into visiting a compromised website, with the exploit unfolding entirely within the browser sandbox. While the sandbox limits damage to the browser process, an attacker who successfully gains execution could pivot or exfiltrate data from the affected machine.