This vulnerability involves a use-after-free condition in the WebMIDI implementation of Google Chrome on Android platforms before version 148.0.7778.216. An attacker with control over the renderer process could leverage this flaw to perform a sandbox escape, which could lead to elevated privileges or further compromise of the system. The vulnerability was publicly disclosed on May 28, 2026, and is rated as high severity by Chromium security. The vendor advisory link is provided but does not explicitly state the patch or remediation status.

Successful exploitation could allow a remote attacker who has compromised the renderer process to escape the sandbox environment, potentially leading to greater control over the affected device. This increases the risk of privilege escalation and further system compromise on affected Android devices running vulnerable Chrome versions.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until an official fix is confirmed, users should avoid untrusted content that might exploit the WebMIDI interface. Monitor official Google Chrome release notes for updates addressing this issue.