CVE-2026-12029 is a use-after-free vulnerability affecting the Video component in Google Chrome on Windows platforms before version 149.0.7827.115. Exploitation requires prior compromise of the renderer process and could enable an attacker to perform a sandbox escape through a specially crafted HTML page. The vulnerability was publicly disclosed on June 11, 2026, with a vendor advisory linked but no explicit patch or remediation level detailed in the provided information.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox environment, potentially leading to greater control over the host system. This elevates the risk from a renderer compromise to a more severe system compromise. However, exploitation requires initial renderer process compromise.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01962725236.html for current remediation guidance. Users should monitor for official updates from Google Chrome and apply them promptly once available.