This vulnerability involves a use-after-free condition (CWE-416) in the Autofill feature of Google Chrome on Android. Exploiting this flaw requires prior compromise of the renderer process and could lead to sandbox escape, allowing an attacker to execute code with elevated privileges. The issue affects Chrome versions before 149.0.7827.53. Although no direct patch link or explicit remediation level is provided, the vendor advisory URL points to a Chrome stable channel update, indicating that a fix is likely available in or after version 149.0.7827.53.

Successful exploitation can result in a sandbox escape, enabling an attacker to execute arbitrary code with higher privileges than normally allowed within the browser sandbox. This can lead to full compromise of the affected device. The vulnerability has a critical severity rating and a CVSS score of 9.6, reflecting high impact on confidentiality, integrity, and availability.

A fix is available in Google Chrome version 149.0.7827.53 and later. Users and administrators should update affected Chrome installations on Android to this version or newer to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory for confirmation and further details: https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html. No additional mitigation steps are indicated by the vendor advisory.