This vulnerability involves a use-after-free condition in the WebRTC implementation of Google Chrome on Linux platforms before version 149.0.7827.53. Exploitation requires user interaction (visiting a malicious HTML page) and could lead to remote code execution. The CVSS score of 8.8 reflects high impact with network attack vector, low attack complexity, no privileges required, and user interaction needed. The vulnerability affects Chrome desktop on Linux and is publicly disclosed as of June 2026.

Successful exploitation could allow a remote attacker to execute arbitrary code on the affected system, potentially leading to full compromise of the user's environment. The vulnerability impacts confidentiality, integrity, and availability of the system. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should monitor for official updates and apply them promptly once available. Until a patch is confirmed, exercising caution with untrusted web content, especially involving WebRTC features, is advisable.