This vulnerability involves a use-after-free condition in the Fullscreen component of Google Chrome on Windows before version 148.0.7778.96. Exploitation requires prior compromise of the renderer process and could lead to sandbox escape, increasing the attacker's privileges. The CVSS vector indicates network attack vector, high complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor advisory is available but does not explicitly state remediation details in the provided information.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to full system compromise or execution of arbitrary code with elevated privileges. This elevates the risk of significant confidentiality, integrity, and availability impacts on affected systems running vulnerable Chrome versions on Windows.

The vendor has published a stable channel update advisory for Chrome (https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html). Although the explicit patch status is not confirmed in the provided data, the affected version is listed as prior to 148.0.7778.96, indicating that updating to version 148.0.7778.96 or later is the recommended remediation. Users should apply this update promptly to mitigate the vulnerability. Patch status is not yet confirmed explicitly—check the vendor advisory for current remediation guidance.