This vulnerability involves a use-after-free condition in the Autofill feature of Google Chrome versions before 149.0.7827.53. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, increasing their privileges beyond the renderer sandbox. The vulnerability is classified as high severity with a CVSS 3.1 score of 8.3, reflecting network attack vector, high complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

Successful exploitation could allow a remote attacker who has compromised the renderer process to escape the sandbox, potentially leading to full system compromise or unauthorized access to sensitive information. The impact affects confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until a patch is confirmed, users should exercise caution with untrusted web content and consider applying any updates provided by Google promptly once available.