This vulnerability involves a race condition in the WebAudio subsystem of Google Chrome before version 148.0.7778.216. Exploitation requires a remote attacker to craft a malicious HTML page that triggers the race, resulting in arbitrary code execution inside the browser sandbox. The issue was publicly disclosed on May 28, 2026, and is rated high severity by the Chromium security team. The vendor has released an update to Chrome 148.0.7778.216 to address this issue. No cloud service is involved, and no CVSS score is provided.

Successful exploitation allows remote code execution within the sandboxed environment of Google Chrome, potentially enabling an attacker to run arbitrary code on the affected system. The sandbox limits the scope of impact, but the ability to execute code remotely is significant. No known active exploits have been reported, reducing immediate risk.

Users should update Google Chrome to version 148.0.7778.216 or later, where this vulnerability is fixed. The vendor advisory confirms the availability of this stable channel update. No additional mitigation steps are indicated by the vendor.