The vulnerability is a use‑after‑free flaw in WebShare that can allow a sandbox escape through a crafted HTML page, if the attacker has already compromised the renderer process. The flaw could enable an attacker to gain higher privileges or execute code beyond the normal browser sandbox, threatening the confidentiality and integrity of the device. This weakness is categorized as CWE‑416.

Google Chrome, as used on Android devices, is affected in all versions prior to 149.0.7827.53. The issue was reported for the stable channel and applies to the renderer component of Chrome on Android.

The official Chromium severity is Medium and no EPSS score is available, making the precise exploitation probability uncertain. The vulnerability is not listed in CISA KEV. The likely attack vector involves a crafted HTML page that triggers the use‑after‑free once the renderer process has been compromised, a path that would typically require the attacker to already have some foothold in the browser environment.