A use‑after‑free vulnerability exists in the Dawn graphics engine used by Chromium/Chrome's rendering process; an attacker who can compromise the renderer with a crafted HTML page can trigger a memory corruption that leads to arbitrary code execution. The flaw is classified as CWE‑416 and CWE‑825, reflecting a use‑after‑free that allows an attacker to read and subsequently write memory out of bounds, resulting in potentially full system compromise once the renderer is under control.

The vulnerability affects Google Chrome builds prior to version 146.0.7680.178 across all supported operating systems including macOS, Linux, and Windows, as indicated by the associated CPE entries. Any machine running the vulnerable Chrome version is exposed to the flaw.

The CVSS score of 8.8 denotes high severity, while the EPSS score of less than 1% suggests that automated exploitation may be infrequent. The entry is listed in the CISA Known Exploited Vulnerabilities catalog, confirming that attackers have already used this flaw in the wild. Exploitation requires an attacker to lure or compromise the renderer process, typically via a malicious web page that can inject crafted data into the rendering engine, making the attack vector remote and relying on the visitor loading the malicious content.