CVE-2026-6921 is a race condition vulnerability (CWE-362) in the GPU processing of Google Chrome on Windows platforms before version 147.0.7727.117. This vulnerability could be triggered remotely by an attacker supplying a crafted video file, potentially enabling sandbox escape. The CVSS v3.1 base score is 5.3, indicating a medium severity impact primarily affecting confidentiality. No known public exploits have been reported. The vendor has published a stable channel update announcement, but the exact patch status is not explicitly stated in the provided advisory link.

If successfully exploited, this vulnerability could allow a remote attacker to escape the Chrome sandbox, potentially leading to unauthorized access to system resources beyond the browser's normal restrictions. The impact is limited to confidentiality loss with no integrity or availability impact indicated. No active exploitation has been observed in the wild.

The vendor has released a stable channel update for Google Chrome, which is likely to include a fix for this vulnerability. Users should update to version 147.0.7727.117 or later to mitigate this issue. Patch status is not explicitly confirmed in the advisory; therefore, users should verify the update details on the official Google Chrome release blog. No additional mitigation steps are specified by the vendor.