This vulnerability in Google Chrome prior to version 150.0.7871.47 involves a use-after-free condition in the GPU process that leads to out-of-bounds read and write. An attacker who has already compromised the renderer process can exploit this flaw by delivering a specially crafted HTML page, enabling arbitrary code execution within the sandboxed GPU process. The vulnerability is rated high severity with a CVSS 3.1 score of 7.5, reflecting its potential impact on confidentiality, integrity, and availability. Google has released a stable channel update addressing this issue in version 150.0.7871.47.

Successful exploitation allows remote code execution within the sandboxed GPU process of Chrome, potentially enabling an attacker to execute arbitrary code. This impacts confidentiality, integrity, and availability of the affected system. However, exploitation requires prior compromise of the renderer process and user interaction (UI:R).

A fix is available in Google Chrome version 150.0.7871.47. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for details.