The vulnerability is a memory corruption flaw in the HTML rendering engine of Google Chrome, which could allow a remote attacker to execute arbitrary code inside the browser sandbox. The flaw arises from malformed or specially crafted HTML content processed by Chrome, enabling attackers to corrupt memory and potentially take control of the sandboxed process. Such code execution could lead to privilege escalation, data exfiltration, or installation of malware on the host system. The weakness is classified as CWE-119, indicating an untrusted input overflow or similar.

The flaw affects Google Chrome users running any version prior to 156.0.8078.73. No specific affected sub‑versions beyond the lower bound are listed in the CNA data, so any build older than the release noted in the official update advisory is considered vulnerable.

Given the attack vector is a web page delivered to the user, the vulnerability is remotely exploitable with no special user interaction beyond viewing or opening a crafted page. The CVE entry indicates a high severity Chromium rating, but no EPSS score is available, and the issue is not listed in the CISA KEV catalog, implying no known widespread exploitation at the time of reporting. Nevertheless, the observable impact of arbitrary code execution inside the sandbox warrants immediate patching to mitigate potential attacks.