This vulnerability involves a use-after-free condition in the Media component of Google Chrome on Windows platforms before version 149.0.7827.103. Exploitation requires a crafted HTML page that triggers the flaw, enabling remote code execution inside the browser sandbox. The issue was assigned CVE-2026-11680 and is recognized with high severity by Chromium security. The vendor has published an advisory linked to a stable channel update announcement, but explicit patch or remediation details are not confirmed in the provided data.

Successful exploitation allows a remote attacker to execute arbitrary code within the sandbox environment of Google Chrome on affected Windows versions. This could lead to unauthorized code execution constrained by sandbox restrictions. No evidence of active exploitation in the wild has been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Users should update to Chrome version 149.0.7827.103 or later once available to address this vulnerability.