This vulnerability involves a use-after-free condition in the WebAuthentication feature of Google Chrome before version 149.0.7827.53. Exploitation requires user interaction through specific UI gestures on a maliciously crafted web page, which may lead to heap corruption. The CVSS 3.1 vector indicates the attack requires network access, high attack complexity, no privileges, and user interaction, with high impact on confidentiality, integrity, and availability. Google has released a stable channel update to fix this issue as referenced in their advisory.

Successful exploitation could allow an attacker to corrupt memory on the victim's system, potentially leading to arbitrary code execution or browser compromise. The impact affects confidentiality, integrity, and availability of the affected system. However, exploitation requires user interaction and specific conditions, and no active exploits have been reported.

Google has released an official stable channel update for Chrome that addresses this vulnerability. Users and administrators should update to version 149.0.7827.53 or later to remediate this issue. Patch status is confirmed by the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html.