The vulnerability is an object lifecycle issue in the WebRTC component of Google Chrome, which can lead to improper lifecycle handling and result in heap corruption. It is associated with CWE-1341 (Improper Management of Object Lifecycles) and CWE-416 (Use After Free). The CVE description indicates that a specially crafted HTML page could trigger the bug, but it does not confirm that the corruption would directly allow arbitrary code execution; the impact is primarily limited to memory corruption and possible browser instability. Chrome’s own severity rating for this defect is Medium, while the CVSS score of 8.8 reflects high potential risk if the lifecycle bug is exploited.

Google Chrome browsers on desktop and mobile platforms that are older than version 151.0.7922.72 are affected. The flaw resides in the core WebRTC implementation shared across all supported platforms, so any user running a vulnerable version is at risk.

The CVSS score of 8.8 signals a high severity. The EPSS score of less than 1% indicates a very low likelihood of public exploitation at this time. The vulnerability is not listed in CISA’s KEV catalog, suggesting no known widespread attacks. Exploitation would require a malicious HTML page loaded in Chrome; though no public exploit code is available, the risk remains theoretical until a proof‑of‑concept is released.