This vulnerability involves a use-after-free condition in the mobile version of Google Chrome on iOS before version 148.0.7778.96. An attacker can exploit this by tricking a user into performing certain UI gestures on a maliciously crafted HTML page, leading to arbitrary code execution. The issue is recognized as critical by Chromium security. Although no CVSS score or explicit remediation level is provided, the vendor has published an advisory linked to a stable channel update blog post.

Successful exploitation could allow a remote attacker to execute arbitrary code on the affected device, potentially leading to full compromise of the browser process. This could result in unauthorized actions within the browser context. No known active exploits have been reported at this time.

Patch status is not yet confirmed from the provided data. Users should consult the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for the latest remediation guidance. If an update to version 148.0.7778.96 or later is available, it should be applied promptly to mitigate this vulnerability.