A use‑after‑free flaw in the V8 engine can allow a crafted malicious Chrome Extension to corrupt heap memory. If the user installs such an extension, the resulting memory corruption could enable arbitrary code execution or other malicious activities. Chromium rates the issue as low severity and no known remote exploitation has been reported.

The vulnerability affects Google Chrome browsers on all platforms that use V8 before version 147.0.7727.55. Users running any Chrome build prior to this revision are potentially exposed.

The CVSS score is not disclosed in the available data; Chromium lists the vulnerability as low severity. EPSS information is missing and the issue is not included in the CISA KEV catalog. Attackers would need to persuade a user to install a malicious extension, a social‑engineering-based vector. No publicly available exploits are known, so the practical risk is moderate.