The vulnerability is a use‑After‑Free flaw in Chrome’s USB renderer on macOS versions before 150.0.7871.47 that can be triggered by a specially crafted HTML page. A successful exploitation could cause the renderer to escape the browser sandbox and run code with higher privileges, creating a serious compromise of the user’s system.

MacOS builds of Google Chrome that precede 150.0.7871.47 are affected. Users running these older releases should upgrade to at least 150.0.7871.47 to eliminate the vulnerability.

Based on the description, the likely attack vector involves delivering a crafted HTML page that triggers the use‑After‑Free in the renderer. The CVSS score of 9.6 indicates high severity, while the EPSS score of < 1% implies a low exploitation probability. The vulnerability is not listed in the CISA KEV catalog. The requirement for an already compromised renderer makes practical exploitation challenging, but a successful sandbox escape would grant the attacker code execution capabilities with elevated privileges.