A race condition in the V8 JavaScript engine allows a crafted HTML page to trigger heap corruption. The CVE description indicates that exploitation could lead to memory corruption, though it does not explicitly state that arbitrary code execution is guaranteed. The weakness is classified as a race condition (CWE‑362).

Users running Google Chrome desktop versions earlier than 147.0.7727.55 are affected. The issue applies to the Chrome stable channel on all platforms that use the V8 engine.

The Chromium team assigned a Medium severity to the issue. Exploitation would require an attacker to deliver a specifically crafted HTML page to a victim, making it a remote, browser‑based attack. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Until the latest update is installed, systems remain at a moderate risk of compromise.