This vulnerability involves a use-after-free condition in the ANGLE graphics engine within Google Chrome on Windows platforms. Exploitation requires a user to visit a maliciously crafted HTML page, potentially enabling remote code execution within the browser sandbox. The issue affects Chrome versions before 149.0.7827.53. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary code within the sandboxed environment of the Chrome browser, potentially compromising confidentiality, integrity, and availability of the affected system. However, no exploits in the wild have been reported at this time.

A vendor advisory is available at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html but does not explicitly state the patch status. The affected version is prior to 149.0.7827.53, so updating to version 149.0.7827.53 or later is strongly recommended. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.