This vulnerability in Google Chrome's Codecs implementation allows improper handling of untrusted input, potentially enabling a remote attacker to escape the browser sandbox via a crafted video file. It affects Chrome versions prior to 149.0.7827.53. The vulnerability was assigned CVE-2026-10966 and is classified with high severity by Chromium security. No CVSS score or detailed remediation information is currently provided. The vendor advisory is available but does not explicitly confirm patch status or mitigation instructions.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox, potentially leading to execution of arbitrary code outside the browser's restricted environment. This could compromise the security boundaries intended to protect the host system from malicious web content. No known exploits in the wild have been reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when opening untrusted video files in Chrome. No vendor-provided mitigation or temporary fix is currently documented.