A use‑after‑free flaw in Chrome’s Bluetooth implementation, present before version 154.0.8037.57, allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the browser sandbox by loading a specially crafted web page. This can lead to full system compromise on the victim’s machine.

The vulnerability affects Google Chrome on desktop platforms running any version earlier than 154.0.8037.57. All users of the affected Chrome builds are potentially exposed until the patch is applied.

The CVSS score of 8.3 indicates high severity, and while the EPSS score is not available, the lack of inclusion in the CISA KEV catalog suggests no known public exploit yet. The attack requires the attacker to first force the renderer process to execute the crafted content, a scenario that could be achieved via a malicious website. Once the use‑after‑free is triggered, the attacker can run code with renderer privileges, bypassing sandbox restrictions.