The vulnerability is a use‑after‑free flaw in the Views module of Google Chrome in versions prior to 156.0.8078.47. A remote attacker can craft and serve an HTML page that, when processed by the browser, could lead to execution of arbitrary code outside the sandbox. The issue is classified as CWE‑416. Because the sandbox escape enables code execution on the host, the impact is Remote Code Execution.

Google Chrome versions older than 156.0.8078.47 are affected. The affected operating systems are not explicitly stated in the CVE data, but because the flaw is in the cross‑platform Views module, it potentially impacts any platform that runs this version of Chrome.

With a CVSS score of 8.8, the use‑after‑free bug is classified as High severity. The EPSS score is below 1%, indicating a low likelihood of exploitation at present. The vulnerability is not present in CISA’s KEV catalog. The likely attack vector, inferred from the description, is the delivery of a malicious HTML page that a user opens or is served by a website, potentially leading the attacker to execute arbitrary code outside the sandbox.