A use‑after‑free error in Chrome’s input handling allows a compromised renderer process to potentially escape its sandbox when processing a specially crafted HTML page, giving an attacker the ability to execute code with higher privileges. The Chromium team rates this issue as high severity, indicating that successful exploitation could lead to full system compromise or theft of sensitive data.

The vulnerability affects Google Chrome. All installations of Chrome older than version 148.0.7778.216 are potentially exposed. Based on the description, it is inferred that the issue relates to the renderer process's internal input subsystem.

The EPSS score of less than 1% indicates a very low but nonzero probability of exploitation. The CVSS score of 8.3 denotes a high‑severity vulnerability that could result in sandbox escape and execution of code at higher privileges. The attack vector is remote; it requires an already compromised renderer to receive a specially crafted HTML page. Although the exploitation probability is low, the potential impact makes the risk significant for any system running an affected Chrome version.