This vulnerability involves a use-after-free condition in the Skia graphics library within Google Chrome before version 148.0.7778.216. Exploitation requires prior compromise of the renderer process and could lead to sandbox escape, increasing the attacker's privileges beyond the renderer sandbox. The vulnerability was publicly disclosed on May 28, 2026, with a high severity rating from Chromium security. No CVSS score or explicit remediation level is provided in the input data. The vendor advisory URL is known but patch status is not confirmed from the provided information.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox environment, potentially leading to greater control over the host system. This elevates the risk from a renderer compromise to a more severe system compromise. No known exploits in the wild have been reported at the time of disclosure.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is available. Until then, no specific mitigation steps are provided in the vendor advisory.