The vulnerability is a use‑after‑free bug in Google Chrome's networking layer that allows a remote attacker to trigger memory corruption through crafted network traffic. Because the flaw is triggered outside the sandbox, the attacker can execute arbitrary code on the host system, compromising confidentiality, integrity, and availability.

All desktop installations of Google Chrome running a version earlier than 155.0.8059.79 are affected. The flaw impacts the Chrome web browser distributed by Google on all supported operating systems.

The CVSS score of 9.6 classifies this issue as Critical, while the EPSS score of less than 1 % indicates a low current probability of exploitation. The flaw is not listed in the CISA KEV catalog. The likely attack vector is a network connection that an attacker can control, such as malicious HTTP responses or WebSocket frames. Exploitation would occur outside the web‑browser sandbox, allowing the attacker to execute code with the same privileges as the Chrome process.