This vulnerability involves a use-after-free condition in the Media component of Google Chrome on Windows platforms before version 151.0.7922.109. Exploitation could enable a remote attacker to perform a sandbox escape, increasing the potential impact of attacks launched via crafted HTML content. The CVSS 3.1 base score is 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. The vendor advisory is available but does not explicitly state the patch status or remediation level.

Successful exploitation could allow an attacker to escape the Chrome sandbox, potentially leading to full system compromise on affected Windows systems. The vulnerability impacts confidentiality, integrity, and availability at a high level. No active exploitation has been reported so far.

Google has published a security advisory for this vulnerability. The affected versions are all versions prior to 151.0.7922.109. Users and administrators should update Google Chrome to version 151.0.7922.109 or later to remediate this issue. Patch status is not explicitly confirmed in the advisory, but the presence of the advisory and version indication strongly suggests that updating to 151.0.7922.109 addresses the vulnerability. Check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html for the latest remediation guidance.