This vulnerability involves a use-after-free condition in the FullScreen functionality of Google Chrome on Windows platforms before version 149.0.7827.53. Exploitation requires prior compromise of the renderer process and can lead to sandbox escape, which significantly increases the attacker's privileges. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor advisory linked corresponds to a stable channel update that addresses this vulnerability.

Successful exploitation can allow an attacker who has compromised the renderer process to escape the Chrome sandbox, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability of the affected system. No known exploits are currently reported in the wild.

A fix is available in Google Chrome version 149.0.7827.53. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for detailed update instructions.