A use after free vulnerability exists in the Network module of Google Chrome prior to version 149.0.7827.53. The flaw allows an attacker to corrupt heap memory through specially crafted network traffic, potentially leading to application crashes or other unstable behavior. The weakness is classified as CWE-416, which addresses improper handling of freed memory. The impact is limited to the compromised browser instance and does not directly expose secrets or allow code execution, but can degrade user experience and reliability.

The affected product is Google Chrome, a web browser for desktop environments. Versions earlier than 149.0.7827.53 are impacted. No other specifics about build platforms or operating systems are provided in the available data.

Because no EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, a clear assessment of exploitation likelihood is difficult. However, the description indicates that a remote attacker could send malicious traffic to a Chrome instance to trigger the heap corruption. The typical attack path would involve sending engineered packets over a network the browser is listening on, such as HTTP or HTTPS connections. The attack can be carried out without user interaction, hinting at a network-based exploit vector. The CVSS baseline is not presented, but the Mid‑severity Chromium labeling suggests moderate risk.