This vulnerability involves type confusion in the Accessibility feature of Google Chrome on Windows, affecting versions before 148.0.7778.96. An attacker with control over the renderer process could exploit this flaw via a specially crafted HTML page to perform a sandbox escape, potentially increasing their privileges or access beyond the renderer sandbox. The issue was publicly disclosed with a high severity rating by Chromium security. Google has published a stable channel update that includes a fix for this vulnerability.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to greater system compromise or privilege escalation on affected Windows systems running vulnerable Chrome versions. There are no known exploits in the wild at the time of publication.

A fix is available in Google Chrome version 148.0.7778.96 and later. Users and administrators should update to this version or newer to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update on affected endpoints. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for detailed update instructions.