This vulnerability is a use-after-free issue in the Cast feature of Google Chrome before version 149.0.7827.53. An attacker positioned on the same local network segment can exploit this flaw by crafting malicious network traffic that triggers heap corruption. The vulnerability is rated critical by Chromium security and has a CVSS v3.1 score of 8.8, reflecting high impact on confidentiality, integrity, and availability without requiring user interaction or privileges. The vendor advisory is available but does not explicitly state if a patch has been released.

Successful exploitation could allow an attacker on the local network to corrupt memory in the Chrome process, potentially leading to arbitrary code execution or browser compromise. The impact affects confidentiality, integrity, and availability of the affected system. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until a patch is confirmed, users should limit exposure to untrusted local network segments and consider disabling Cast functionality if feasible.