This vulnerability involves a use-after-free condition in the GPU process of Google Chrome versions before 150.0.7871.47. An attacker who has already compromised the renderer process could exploit this flaw to perform a sandbox escape, thereby gaining higher privileges on the affected system. The vulnerability is critical due to its potential to allow remote code execution with high impact on confidentiality, integrity, and availability. The CVSS vector indicates that the attack requires no privileges and low complexity but does require user interaction. The vendor advisory linked does not explicitly confirm patch availability or remediation level, so patch status is not yet confirmed.

Successful exploitation could allow an attacker to escape the Chrome sandbox, potentially leading to arbitrary code execution with elevated privileges. This compromises the security boundaries intended to isolate web content from the underlying system, impacting confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when interacting with untrusted web content and consider applying any available updates promptly once released.