The vulnerability is a use‑after‑free bug in Chrome's audio component that can be triggered by a maliciously crafted web page. When exploit conditions are met and the renderer process is already compromised, an attacker could potentially re‑use freed memory to escape the renderer sandbox. The impact is that the attacker might obtain arbitrary code execution on the local system with the same privileges as the browser; this capability is inferred from the sandbox escape, not directly stated in the description.

All desktop installations of Google Chrome before version 151.0.7922.72 are affected. The issue appears in the stable channel and in earlier beta, dev, or canary builds that have not applied the patch. Any operating system that runs Chrome on the desktop is susceptible.

With a CVSS score of 9.6 this vulnerability is rated critical. The EPSS score of <1% indicates that exploitation is currently unlikely. The CVE is not listed in CISA's KEV catalog. Exploitation requires the attacker to host or control a web page that a compromised renderer processes, and then trigger the audio use‑after‑free to escape the sandbox. The attack vector therefore is a malicious web page that interacts with the audio subsystem while a renderer is compromised.