This vulnerability involves a use-after-free condition in the TabStrip feature of Google Chrome before version 149.0.7827.103. Exploitation requires user interaction with crafted UI gestures on a malicious HTML page, potentially leading to arbitrary code execution. The vulnerability is publicly known and documented as CVE-2026-11632 with a critical severity rating by Chromium security. No CVSS score or explicit remediation level is provided, but the vendor advisory references a stable channel update that likely contains the fix.

Successful exploitation could allow a remote attacker to execute arbitrary code on the affected system by tricking the user into specific UI interactions. This could lead to full compromise of the user's Chrome process and potentially the underlying system depending on sandboxing and privilege levels. No known exploits in the wild have been reported at this time.

A fix is available in Google Chrome version 149.0.7827.103. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation requires applying the browser update. Patch status is confirmed by the vendor advisory linked to the stable channel update. No additional mitigation steps are indicated by the vendor.