A memory corruption flaw in the Cache module of Google Chrome versions before 156.0.8078.73 permits an attacker to inject malformed data that can corrupt memory. The resulting corruption is executed inside the browser sandbox, enabling the attacker to run arbitrary code with the privileges of the sandbox process. This weakness is classified as a classic out‑of‑bounds write (CWE‑119).

The vulnerability affects Google Chrome on all operating systems for which the affected versions were released. Users of Chrome earlier than 156.0.8078.73 are at risk; all later releases have participated in the patch. No specific platform is excluded based on the CNA data.

The local severity assessment by Chromium is High, but CVSS metrics are not publicly provided in the report. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a remote attacker delivering a crafted HTML page that is rendered by an affected browser. Exploitation requires the user to load the malicious content, which can happen through phishing or malicious websites. Given the lack of an EPSS score, the exploitation probability remains uncertain, but the high severity and memory corruption nature warrant immediate attention.