This vulnerability involves a use-after-free condition in the Aura subsystem of Google Chrome on Windows platforms before version 149.0.7827.103. An attacker with control over the renderer process could leverage this flaw to perform a sandbox escape, which could lead to elevated privileges or further compromise of the host system. The issue was publicly disclosed on June 8, 2026, and is considered critical by the Chromium security team. No CVSS score is provided, and no direct patch or remediation level is specified in the data, though a vendor advisory link is included for official updates.

Successful exploitation could allow an attacker who has already compromised the renderer process to escape the Chrome sandbox, potentially leading to execution of arbitrary code with higher privileges on the host system. This elevates the risk of further system compromise beyond the browser sandbox containment.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Users should update to Chrome version 149.0.7827.103 or later once available to address this vulnerability.