The issue is related to a use after free in the Extensions API, which can lead to heap corruption. An attacker who convinces a user to install a malicious extension can potentially exploit this issue via specific UI interactions. Additionally, exploitation may allow a remote attacker to disclose protected information using a specially crafted web page.