This vulnerability involves a use-after-free condition in the Navigation feature of Google Chrome before version 148.0.7778.96. Exploitation requires prior compromise of the renderer process and could lead to sandbox escape, increasing the attacker's privileges. The CVSS vector indicates network attack vector, high complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to escape the Chrome sandbox, potentially leading to full system compromise or unauthorized access to sensitive data. The vulnerability affects confidentiality, integrity, and availability of the affected system. However, exploitation requires prior compromise of the renderer process and user interaction.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should monitor this advisory for updates and apply any official updates from Google Chrome promptly once available.