This vulnerability involves a use-after-free condition in the Serial API implementation within Google Chrome on Android platforms before version 149.0.7827.53. Exploitation requires that the attacker already control the renderer process, after which they could leverage this flaw to escape the browser sandbox, potentially leading to full compromise of the affected system. The vulnerability is rated with a CVSS 3.1 score of 8.3, indicating high impact on confidentiality, integrity, and availability. The vendor advisory linked does not explicitly state patch or remediation details, so patch status remains unconfirmed.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox, leading to elevated privileges and potentially full system compromise. The vulnerability affects confidentiality, integrity, and availability of the affected system. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official confirmation of a fix, users should exercise caution with untrusted content and consider updating to the latest Chrome version once available.