The vulnerability is a use‑after‑free in the Navigation subsystem of Google Chrome. It allows a remote attacker who has already compromised the renderer process to invoke freed memory and potentially escape the sandbox. The primary impact is elevation of privilege that could lead to arbitrary code execution within the host system. The weakness is classified as CWE‑416.

Affected clients run Google Chrome versions preceding 151.0.7922.72. The flaw manifests in any configuration where the renderer process may be exposed to untrusted HTML content. Users with older Chrome installations are at risk until they update to a patched release.

The CVSS score of 8.3 indicates high severity. However, the EPSS score of less than 1% implies that active exploitation is currently rare, and the vulnerability is not yet cataloged in CISA's known exploited vulnerabilities list. The likely attack path requires the attacker to first gain control of a renderer process, for example through a malicious web page, and then trigger the use‑after‑free to escape the sandbox. Once the sandbox is broken, arbitrary code could run with the privileges of the browser process.