This vulnerability involves a use-after-free condition in the Chromoting feature of Google Chrome on Linux platforms before version 148.0.7778.96. Exploitation requires a remote attacker to send crafted network traffic, potentially leading to arbitrary code execution. The CVSS vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts confidentiality, integrity, and availability with high severity. The vulnerability is publicly disclosed but lacks explicit vendor confirmation of a patch in the provided advisory link.

Successful exploitation could allow remote attackers to execute arbitrary code on affected systems, compromising system confidentiality, integrity, and availability. This could lead to full system compromise or unauthorized control over the affected Chrome instance on Linux. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Users should upgrade to Chrome version 148.0.7778.96 or later once confirmed. Until then, exercise caution with untrusted network traffic and consider limiting exposure of affected systems to potentially malicious networks.