The vulnerability is a type confusion error in the V8 JavaScript engine used by Google Chrome. It allows a remote attacker to craft an HTML page that confuses the engine’s type handling, enabling arbitrary code execution inside the browser’s sandbox. This flaw is a high‑severity issue, as it can lead to complete compromise of the sandbox and, through potential privilege escalation rules, system compromise.

Google Chrome browsers with versions earlier than 147.0.7727.55 are affected. Users running these versions on any platform are susceptible until a newer build addresses the flaw.

Given the high severity rating and the fact that the flaw can be triggered via a malicious web page, the risk of exploitation is significant for users visiting untrusted sites. The CVE does not provide an EPSS score or CEV listing, but the lack of such data does not reduce the potential for real‑world attacks. An attacker who can serve a malicious page or influence a user’s browsing activity could attempt to exploit this type confusion to execute code in the sandbox, potentially bypassing security boundaries. No official workaround is available, so the only sustainable mitigation is to upgrade to an affected‑issue‑fixed release.