This vulnerability involves a use-after-free condition in the V8 engine component of Google Chrome before version 149.0.7827.53. Exploitation requires user interaction through specific UI gestures on a maliciously crafted HTML page, enabling remote code execution within the sandbox environment. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor has published a stable channel update to remediate this issue.

Successful exploitation could allow an attacker to execute arbitrary code inside the sandboxed environment of the browser, potentially compromising confidentiality, integrity, and availability of the affected system. However, exploitation requires user interaction and specific UI gestures, which may limit the attack surface. No known exploits in the wild have been reported at this time.

Google has released an official fix in Chrome version 149.0.7827.53. Users and administrators should update affected Chrome installations to this version or later to remediate the vulnerability. Patch status is confirmed by the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html.