CVE-2026-12467 is a use-after-free vulnerability in the Extensions module of Google Chrome versions before 149.0.7827.155. Exploitation requires prior compromise of the renderer process and could enable sandbox escape via crafted HTML content. The vulnerability is rated high severity by Chromium. The vendor advisory indicates a stable channel update addressing this issue in version 149.0.7827.155. No explicit CVSS score or detailed remediation level is provided in the advisory.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox environment, potentially leading to increased privileges or further compromise of the host system. This elevates the risk beyond typical renderer process compromise, making it a significant security concern.

Users and administrators should update Google Chrome to version 149.0.7827.155 or later, where this vulnerability is fixed. Since this is a client-side application, patching the browser is the primary mitigation. No additional vendor advisories indicate alternative mitigations or that no action is required.