Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 enables a remote attacker to execute arbitrary code inside the browser sandbox through a crafted HTML page. This flaw is rated high by Chromium’s security team and allows remote code execution within the browser process. The vulnerability is limited to the browser environment and does not explicitly grant broader system access according to the information available.

The flaw affects users of Google Chrome versions prior to 155.0.8059.79 on desktop platforms. Any configuration that enables the WebRTC feature in the browser could expose affected installations. No specific operating system or platform is singled out, as the vulnerability is confined to the browser code base.

Based on the description, the likely attack vector is a maliciously crafted HTML page delivered to the user. The CVSS score of 8.8 classifies this a high‑severity issue, yet the EPSS score of less than 1% indicates a very low current exploitation probability. Because the vulnerability is remote and requires the victim to open a crafted HTML page in a vulnerable Chrome instance, it is not listed in the CISA Known Exploited Vulnerabilities catalog. Attackers would need to deliver a malicious page to the target, which can then leverage the use‑after‑free to execute code within the browser's sandbox. As the flaw is not publicly known to be actively exploited, the overall risk to organizations remains moderate until a broader exploitation is observed.