This vulnerability involves a memory corruption flaw in the Quota component of Google Chrome versions prior to 156.0.8078.79. The flaw, identified as a buffer overflow (CWE‑119), can be triggered by a crafted HTML page loaded in the browser. When exploited, a remote attacker has the potential to execute arbitrary code within the sandboxed rendering process, which could be used to bypass sandbox restrictions or compromise the host system.

Affected systems are users running Google Chrome on desktop platforms with versions older than 156.0.8078.79. The vulnerability is specific to the stable channel of Chrome and the affected releases were addressed in the October update that ships version 156.0.8078.79 or later.

The CVE carries a high Chromium security severity rating and is flagged as a remote code execution risk. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. However, because it can be triggered by any web page delivered over the network, a malicious actor can abuse it from a remote site. Successful exploitation requires the victim to load the crafted page, so the attack vector is dependent on user interaction with a malicious or compromised site.