This vulnerability is a use-after-free issue in the Cast feature of Google Chrome before version 149.0.7827.53. Exploitation requires an attacker to be on the same local network segment and involves sending crafted network traffic to trigger arbitrary code execution. The CVSS vector indicates low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor advisory URL is provided but does not explicitly state the patch or remediation status.

Successful exploitation could allow an attacker on the local network to execute arbitrary code within the context of the affected Chrome process, potentially leading to full compromise of the browser environment. This impacts confidentiality, integrity, and availability of the system running the vulnerable Chrome version.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official confirmation, users should consider updating to the latest Chrome version once available. No specific temporary mitigations are provided in the advisory.