This vulnerability involves a use-after-free condition in the SurfaceCapture feature of Google Chrome on Android before version 149.0.7827.53. Exploitation requires that an attacker has already compromised the renderer process, after which they could leverage this flaw to escape the browser's sandbox environment via a specially crafted HTML page. The issue is rated high severity with a CVSS 3.1 score of 8.3, indicating significant impact on confidentiality, integrity, and availability if exploited.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox, potentially leading to elevated privileges and further compromise of the host system. The vulnerability affects confidentiality, integrity, and availability of the affected system. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed and applied, users should exercise caution when browsing untrusted content on affected versions of Chrome for Android. No specific temporary mitigations are provided by the vendor advisory.