This vulnerability involves a use-after-free condition in the Ozone subsystem of Google Chrome before version 149.0.7827.53. Exploitation requires user interaction (UI:R) and network access (AV:N) with no privileges required (PR:N). Successful exploitation can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. The CVSS vector indicates the attack surface is remote and the attack complexity is low. The vendor advisory is available but does not explicitly confirm patch availability in the provided data.

If exploited, this vulnerability could allow a remote attacker to execute arbitrary code on the victim's system by delivering a crafted HTML page. This could compromise user data, system integrity, and availability. No known exploits are reported in the wild, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should monitor this advisory for updates and apply official updates from Google Chrome promptly once confirmed available. Until then, exercise caution when visiting untrusted web pages.