A use‑after‑free flaw exists in Chrome’s CameraCapture component on macOS, allowing a maliciously crafted HTML page to trigger a sandbox escape that can lead to remote code execution by a web attacker. The vulnerability permits an attacker to dereference freed memory and exploit the resulting undefined behavior to break the browser’s isolation mechanisms. The highest severity rating is given for this flaw.

Google Chrome for macOS users running any version prior to 149.0.7827.103 is impacted. The flaw is specific to the stable channel builds of Chrome on the Mac platform and does not affect other operating systems or older Chrome releases.

The CVE receives a CVSS score of 9.6, indicating very high severity. No EPSS information is currently available, and it is not listed in the CISA KEV catalog. The most likely attack requires a remote victim to open a malicious HTML page, which could be delivered via a compromised website, email attachment, or embedded content. If the vulnerability is successfully exploited, the attacker can escape the browser sandbox and potentially execute arbitrary code with the privileges of the logged‑in user.