This vulnerability involves a use-after-free condition in the PerformanceManager of Google Chrome before version 148.0.7778.216. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, which could lead to elevated privileges or further compromise of the host system. The vulnerability was publicly disclosed on May 28, 2026, and is rated as high severity by the Chromium project. The vendor advisory URL is provided but does not explicitly state the patch or remediation status in the input data.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to escape the Chrome sandbox, potentially leading to greater control over the affected system. This increases the risk of system compromise beyond the browser sandbox. No known active exploits have been reported at the time of disclosure.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to Chrome version 148.0.7778.216 or later once available to mitigate this vulnerability. Until then, no specific mitigations are provided in the input data.