Use-after-free in DOM in Google Chrome

Successful exploitation can result in arbitrary code execution within the Chrome sandbox in the context of the targeted browser process. The provided CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates network-reachable exploitation with user interaction and potentially high impact to confidentiality, integrity, and availability within the affected sandboxed context. The content does not indicate a sandbox escape or direct host-level code execution.

Apply the vendor update as soon as possible and verify the browser has been restarted into the patched build. Until patching is complete, reduce exposure by limiting access to untrusted or attacker-controlled web content, using browser sandboxing and other platform hardening features, and restricting high-risk browsing activity where feasible. No specific workaround beyond updating is provided in the supplied content.

Update Google Chrome to version 148.0.7778.179 or later. The provided content states that versions prior to 148.0.7778.179 are affected, and Google released Chrome Stable updates 148.0.7778.178/179 for Windows and Mac and 148.0.7778.178 for Linux as part of the security rollout. Organizations should ensure affected installations receive the vendor fix and that browsers are restarted so the patched version is active.