The vulnerability is a use‑after‑free in the navigation component of Google Chrome prior to version 149.0.7827.103. An attacker who can supply a crafted HTML page may trigger the flaw and escape the browser’s sandbox, potentially allowing the attacker to execute arbitrary code on the host. The issue is classified as Chromium security severity high and maps to CWE‑416, a common type of memory corruption that can lead to privilege escalation.

Google Chrome versions earlier than 149.0.7827.103 are vulnerable; the CVE does not specify affected operating systems, so any platform running those releases is potentially impacted.

Based on the description, it is inferred that the attacker must provide a specially crafted web page to trigger the flaw. The attacker therefore needs the user to visit a malicious site or otherwise load the crafted content. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Nonetheless, the CVSS score of 9.6 and potential for sandbox escape mean the risk to systems that run the affected Chrome releases without a patch is significant.