This vulnerability involves a use-after-free condition in the USB handling code of Google Chrome on Android devices before version 149.0.7827.53. Exploitation could allow a remote attacker to perform a sandbox escape via a specially crafted HTML page. The issue was publicly disclosed on June 4, 2026, but no CVSS score or detailed remediation status is provided in the available data. The vendor advisory linked does not explicitly confirm patch availability or mitigation steps.

Successful exploitation could lead to sandbox escape, potentially allowing an attacker to execute code outside the browser's restricted environment on an affected Android device. This elevates the risk beyond typical web content compromise but is rated medium severity by Chromium security. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should update Google Chrome on Android to version 149.0.7827.53 or later once available. Until then, exercise caution when browsing untrusted websites, especially those that might interact with USB devices.