A use‑after‑free flaw in the Views component of Google Chrome allows a remote attacker to trigger heap corruption by presenting the user with a crafted HTML page that requires specific UI gestures. Classified under CWE‑416, this flaw could enable memory corruption within the browser process, which may be leveraged to execute arbitrary code and compromise confidentiality, integrity, and availability of the affected system.

All installations of Google Chrome older than version 150.0.7871.47 on any operating system (Windows, macOS, Linux, etc.) are potentially vulnerable. No specific platform restrictions were noted; the vulnerability applies to every platform that ships these Chrome releases.

The CVSS base score of 7.5 indicates high severity, while the EPSS score of <1% suggests that exploitation is currently unlikely. The vulnerability is not listed in CISA's KEV catalog, and a successful attack would require a victim to access a malicious web page and perform specific UI gestures; if achieved, the attacker could cause heap corruption in the browser process and potentially exploit it to execute arbitrary code.