This vulnerability is a use‑after‑free flaw in the Accessibility component of Google Chrome on Windows. When a renderer process is already compromised, an attacker can deliver a maliciously crafted HTML page that accesses memory after it has been freed, potentially allowing the attacker to escape the renderer sandbox and run code with higher privileges. The weakness maps to CWE‑416 and CWE‑825 and is rated as high severity by Chromium.

Google Chrome for Windows versions earlier than 148.0.7778.216 are affected. Any Windows installation running a vulnerable Chrome build is at risk. No other operating systems are mentioned in the advisory.

The advisory marks the issue as high severity, with a CVSS score of 8.3, an EPSS score of < 1%, and it is not listed in the CISA KEV catalog. Exploitation requires an attacker to gain control of the renderer process, which typically involves tricking the browser into loading malicious HTML from a remote or local source. While public exploit evidence is lacking, the potential impact is significant if the conditions are met. The likely attack vector is a remote web page that targets the Accessibility module of Chrome.