This vulnerability involves a use-after-free condition in the Omnibox feature of Google Chrome before version 149.0.7827.53. Exploitation requires user interaction with specific UI gestures on a maliciously crafted HTML page, potentially leading to heap corruption. The issue was publicly disclosed with a medium severity rating by Chromium security. The vendor advisory linked does not explicitly state if a patch is available or if a fix has been applied in the referenced version.

Successful exploitation could result in heap corruption, which may lead to arbitrary code execution or browser instability. However, exploitation requires user interaction with specific UI gestures, limiting the attack vector. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should update to Chrome version 149.0.7827.53 or later once confirmed patched. Until then, exercising caution with untrusted web content and avoiding suspicious UI interactions may reduce risk.