This vulnerability in Google Chrome's Chromoting feature arises from insufficient validation of untrusted input, leading to potential heap corruption when processing malicious network traffic. It affects versions prior to 150.0.7871.47. The CVSS 3.1 score of 8.8 reflects high impact on confidentiality, integrity, and availability with network attack vector, low attack complexity, no privileges required, and user interaction required. The vendor advisory is available but does not explicitly state remediation details, so patch status remains unconfirmed.

Successful exploitation could allow a remote attacker to corrupt the heap memory of the affected Chrome process, potentially leading to arbitrary code execution or denial of service. The impact affects confidentiality, integrity, and availability of the system running the vulnerable Chrome version.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official fixes are confirmed, users should exercise caution with untrusted network traffic and consider updating to the latest Chrome version once available.