This vulnerability arises from insufficient validation of untrusted input within the UI components of Google Chrome on Linux and ChromeOS platforms before version 148.0.7778.96. An attacker could exploit this by convincing a user to perform specific UI gestures on a maliciously crafted HTML page, potentially leading to arbitrary code execution. The issue is classified with medium severity by Chromium security. The vendor advisory linked does not explicitly state the availability of a patch or remediation level.

Successful exploitation could allow remote code execution on affected systems, contingent on user interaction with crafted content. This could compromise the integrity and security of the user's environment. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 148.0.7778.96 or later once available. Until confirmation of a fix, avoid interacting with untrusted or suspicious web content that could trigger the vulnerability.