This vulnerability involves a use-after-free condition in the File Input feature of Google Chrome on Mac platforms before version 149.0.7827.53. Exploitation requires user interaction through specific UI gestures on a maliciously crafted HTML page, potentially enabling sandbox escape. The issue was publicly disclosed on June 4, 2026, and is tracked as CVE-2026-11100. Although no CVSS score is provided, Chromium rates the severity as medium. The vendor advisory indicates a stable channel update is available that includes the fix.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox on Mac systems, potentially leading to execution of arbitrary code outside the browser's restricted environment. This could compromise system security and user data confidentiality. However, exploitation requires user interaction with crafted UI gestures, and no known exploits are reported in the wild at this time.

A fix for this vulnerability is available in Google Chrome version 149.0.7827.53. Users and administrators should update affected Chrome installations on Mac to this version or later to remediate the issue. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for detailed update instructions.