This vulnerability in Google Chrome's Media component on Mac platforms allows out of bounds memory access (read and write) that can be leveraged by an attacker with renderer process access to execute arbitrary code inside the sandbox environment. The issue affects versions prior to 149.0.7827.103. The flaw was publicly disclosed on June 8, 2026, with a Google advisory linked but without explicit patch or remediation information in the provided data.

Successful exploitation could lead to arbitrary code execution within the sandboxed renderer process, potentially allowing an attacker to escalate privileges or perform unauthorized actions within the browser context. However, exploitation requires prior compromise of the renderer process. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Users should update to Chrome version 149.0.7827.103 or later once confirmed available. Until then, no additional specific mitigations are indicated.