This vulnerability involves a use-after-free condition in the Compositing module of Google Chrome on Mac platforms before version 149.0.7827.103. Exploitation requires a remote attacker to craft a malicious HTML page that triggers the flaw, potentially leading to arbitrary code execution. The issue was publicly disclosed on June 8, 2026, and is marked critical by Chromium security. No CVSS score or detailed remediation information is currently available from the vendor advisory, which links to a Chrome stable channel update announcement.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on affected Mac systems running vulnerable versions of Google Chrome. This could lead to full compromise of the browser process and potentially the underlying system depending on sandboxing and other mitigations. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Users should update Google Chrome on Mac to version 149.0.7827.103 or later once available to address this vulnerability. Until confirmation of a fix, avoid visiting untrusted or suspicious websites that could host crafted HTML content.