This vulnerability involves a use-after-free condition in the Bluetooth implementation of Google Chrome on Mac platforms before version 149.0.7827.103. Exploitation requires a remote attacker to deliver a specially crafted HTML page that triggers heap corruption, potentially leading to arbitrary code execution or browser instability. The issue was publicly disclosed on June 8, 2026, with Google releasing a stable channel update to remediate the flaw. No CVSS score is provided, but the Chromium security team rates the severity as high.

Successful exploitation could allow a remote attacker to corrupt memory on the affected system, potentially leading to arbitrary code execution or denial of service within the Chrome browser on Mac. No evidence of active exploitation in the wild has been reported at this time.

Google has released Chrome version 149.0.7827.103 which addresses this vulnerability. Users and administrators should update affected Chrome installations on Mac systems to this version or later to mitigate the risk. No additional mitigation steps are indicated by the vendor advisory.