The vulnerability is a use‑after‑free flaw in the Blink rendering engine of Google Chrome versions prior to 149.0.7827.197. By visiting a specially crafted HTML page, a remote attacker can cause the browser to access memory that has already been freed, resulting in arbitrary code execution inside the Chrome sandbox. This allows an attacker to run code with privileges of the sandboxed process, potentially compromising the user’s system if the sandbox can be bypassed.

All users running Google Chrome (stable channel, desktop) built before 149.0.7827.197 are affected, including versions 148.x and earlier. The bug is confined to the Blink engine that drives HTML rendering in the browser.

Chromium categorizes the issue as high severity. No CVSS or EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, indicating no confirmed active exploitation yet. The attack requires delivery of a specially constructed HTML page, meaning the attacker must lure a user to a malicious site or coerce a user to expose the page. Despite the lack of observable exploitation, the potential for arbitrary code execution within the browser warrants a high risk assessment.