CVE-2026-12028 is a use-after-free vulnerability in the GPU subsystem of Google Chrome on Android platforms before version 149.0.7827.115. Exploitation requires prior compromise of the renderer process and may enable an attacker to perform a sandbox escape via a specially crafted HTML page. The vulnerability is recognized as high severity by Chromium security but lacks a published CVSS score and explicit remediation details in the provided advisory link.

If exploited, this vulnerability could allow an attacker with control over the renderer process to escape the browser sandbox, potentially leading to further compromise of the device. The impact is limited to affected versions of Chrome on Android prior to 149.0.7827.115. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01962725236.html for current remediation guidance. Users and administrators should update to Chrome version 149.0.7827.115 or later once available to address this vulnerability.