This vulnerability (CVE-2026-6360) is a use-after-free issue classified under CWE-416 affecting Google Chrome's FileSystem prior to version 147.0.7727.101. It enables a remote attacker to cause object corruption through a specially crafted HTML page. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed with no confirmed patch or remediation level stated in the vendor advisory.

Successful exploitation could lead to significant compromise of the affected system's confidentiality, integrity, and availability due to object corruption from use-after-free. This could allow remote attackers to execute arbitrary code or cause a denial of service. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites and consider applying any available updates promptly once released by Google.