CVE-2026-7341 is a high-severity use-after-free vulnerability in Google Chrome's WebRTC implementation affecting versions prior to 147.0.7727.138. It enables remote code execution inside the sandbox via a crafted HTML page. The vulnerability is tracked under CWE-416 and has a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The vendor advisory is available but does not explicitly state patch availability or remediation level. No known exploits have been reported in the wild.

Successful exploitation allows a remote attacker to execute arbitrary code within the sandboxed environment of the browser, potentially compromising confidentiality, integrity, and availability of the affected system. The vulnerability requires user interaction (visiting a malicious page) but does not require privileges or prior authentication. No active exploitation has been observed so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html for current remediation guidance. Users should monitor for official Chrome updates addressing this vulnerability and apply them promptly once available. Until then, exercising caution with untrusted web content is advised.