The vulnerability is a use‑after‑free flaw located in the Views component of Google Chrome. An attacker who has already compromised the renderer process could feed a crafted HTML page that triggers the freed memory access, potentially allowing the attacker to escape the browser’s sandbox and execute arbitrary code outside the renderer’s restricted environment. The flaw can lead to loss of confidentiality, integrity, and availability of the affected system.

Google Chrome versions earlier than 151.0.7922.72 are affected. Users running these releases are at risk until they upgrade to the patched version or later releases.

EPSS indicates the probability of exploitation is below 1 %, and the vulnerability is not listed in CISA’s KEV catalog. Chromium rates the issue as Critical, implying a high severity score in CVSS terms. The attack requires that the attacker have compromised the renderer process, which can be achieved through earlier vulnerabilities or compromising an application that uses Chrome’s rendering engine. Once privilege is escalated, arbitrary code execution is possible within the host system.