Use after free condition in Chrome's Touchbar code occurs when a previously freed object is accessed again. An attacker can deliver a specially crafted HTML page that triggers this use after free, potentially allowing the attacker to escape the browser sandbox and execute code with host-level privileges. The weakness is labeled CWE-416 and the security severity is high. Such an escape could compromise confidentiality, integrity, and availability of the affected system.

The vulnerability macOS prior to the patch version 150.0.7871.47, all earlier stable channel builds that include the Touchbar functionality. The affected product is Google Chrome for macOS, with affected versions up to and including 150.0.7871.46.

Based on the description, it is inferred that the attack vector is remote: a malicious webpage can be served to a user who has Chrome open. The CVSS score is 9.6, indicating a high severity vulnerability. The EPSS score is less than 1%, showing a low probability of exploitation at the time of analysis. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires the user to visit a page containing the crafted HTML; once the use after free occurs, the attacker may escape the sandbox, potentially leading to remote code execution. Due to the absence of publicly known exploit code, the actual exploitation risk remains uncertain but significant.