This vulnerability involves a use-after-free condition in the PDF processing functionality of Google Chrome before version 149.0.7827.103. Exploitation requires a crafted PDF file that triggers the flaw, potentially enabling remote code execution within the sandboxed environment of the browser. The issue was publicly disclosed on June 8, 2026, with a high severity rating from Chromium security. No CVSS score or detailed remediation status is provided in the available data. The vendor advisory URL is provided but does not explicitly confirm patch availability or mitigation steps.

Successful exploitation could allow remote code execution inside the Chrome sandbox via a malicious PDF file. This could lead to unauthorized code execution with the privileges of the browser sandbox. No known active exploits have been reported, and the impact is limited to affected Chrome versions prior to 149.0.7827.103.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Users should update to Chrome version 149.0.7827.103 or later once confirmed. Until then, exercise caution when opening PDF files from untrusted sources.