This vulnerability involves a use-after-free condition in the Network module of Google Chrome before version 149.0.7827.53. Exploitation requires user interaction (UI required) and can lead to remote code execution with high impact on confidentiality, integrity, and availability. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required. The vendor advisory URL points to a stable channel update announcement but does not explicitly confirm the patch status in the provided input.

Successful exploitation allows remote attackers to execute arbitrary code on the victim's system, potentially leading to full compromise of the affected Chrome browser environment. The impact affects confidentiality, integrity, and availability at a high level. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to the latest stable Chrome version once available. Until confirmed, avoid visiting untrusted or suspicious websites that could host crafted HTML content.