The vulnerability is a use‑after‑free flaw in the Printing component of Google Chrome. If an attacker can compromise the renderer process, they may supply a crafted HTML page that triggers this flaw, allowing arbitrary code execution outside the sandbox. This constitutes a remote code execution threat by exploiting memory corruption. The weakness is classified as CWE‑416.

All Chrome releases prior to 154.0.8037.57 are affected. The issue exists in the desktop version of Google Chrome.

The CVSS score of 8.3 reflects a high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Attackers would need to achieve renderer process compromise, typically via a malicious web page that prompts the user to open or print content. Once the renderer is compromised, arbitrary code can be executed with privileges outside the browser sandbox, risking data integrity, confidentiality, and potentially system compromise. This high impact combined with the likelihood of exploitation makes immediate action advisable.