Impact
An integer overflow occurs in the WebRTC component of Google Chrome, allowing a remote attacker to perform an out‑of‑bounds memory write by serving a specially crafted HTML page. The issue is classified as a low‑severity vulnerability and does not explicitly state that it leads to arbitrary code execution.
Affected Systems
Versions of Google Chrome older than 147.0.7727.55 on all desktop platforms are affected, regardless of operating system.
Risk and Exploitability
The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, implying no reported active exploits to date. The likely attack vector is a remote web‑based scenario where a user visits a malicious page in Chrome, and no elevated privileges are required. Given the low severity classification and absence of known exploits, the overall risk is moderate to low, but prompt patching is advised.
OpenCVE Enrichment