This vulnerability involves a use-after-free condition in the Codecs module of Google Chrome on Windows platforms before version 149.0.7827.53. Exploitation requires prior compromise of the renderer process and could lead to sandbox escape via crafted HTML content. The issue is recognized by Chromium security with a medium severity rating. No CVSS score or detailed remediation information is currently available. The vendor advisory URL is provided but does not specify patch or mitigation details.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to escape the sandbox environment, potentially increasing their privileges or access on the affected system. However, exploitation requires prior renderer compromise, limiting the initial attack vector. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official fixes are confirmed, users should ensure their Chrome browsers are updated to the latest available versions and follow any vendor recommendations.