An inappropriate implementation in Chrome’s Core on macOS permits a remote attacker who has already compromised the renderer process and convinced a user to open a maliciously crafted HTML page to potentially execute code outside the browser sandbox. Classified as CWE-825 (Use‑After‑Free) and CWE-841 (Insufficient Validation), the flaw relies on improper handling of renderer memory, allowing elevated privileges if triggered. Because the attacker must first gain renderer process compromise and then use social engineering, the attack path is more complex than a simple local exploit.

Google Chrome for macOS, all releases prior to version 156.0.8078.47 are vulnerable.

The EPSS score of < 1% indicates a low probability of exploitation, but the flaw can still be exploited remotely if an attacker has first compromised the renderer process and then lures a user to open a maliciously crafted HTML page. The vulnerability is not listed in the CISA KEV catalog, but its high CVSS indicates a significant danger if the affected browser is in use.