This vulnerability involves a use-after-free condition in the MimeHandlerView of Google Chrome before version 149.0.7827.53. Exploitation requires user interaction (UI:R) and can lead to remote code execution within the sandbox environment. The CVSS vector indicates the attack can be performed over the network without privileges and with low attack complexity. The flaw impacts confidentiality, integrity, and availability at a high level. The vendor advisory URL is provided but does not explicitly confirm patch availability in the input data.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code inside the Chrome sandbox, potentially compromising the confidentiality, integrity, and availability of the affected system. The attack requires a user to visit a maliciously crafted HTML page. There are no known exploits in the wild at the time of this report.

The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level in the supplied data. Since the affected version is prior to 149.0.7827.53, users should update to version 149.0.7827.53 or later if available. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance.