This vulnerability involves a use-after-free condition in the FileSystem feature of Google Chrome before version 148.0.7778.168. Exploitation requires user interaction through specific UI gestures on a maliciously crafted HTML page, potentially enabling sandbox escape. The issue was publicly disclosed on May 14, 2026, and is rated critical by Chromium security. The vendor has released an update to fix this vulnerability as indicated in the official Chrome stable channel update advisory.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox, potentially leading to execution of arbitrary code outside the browser's restricted environment. This elevates the risk of system compromise beyond the browser context. However, exploitation requires user interaction with crafted content. No active exploits have been reported.

A fix is available in Google Chrome version 148.0.7778.168 as per the official Chrome stable channel update advisory (https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html). Users and administrators should update affected Chrome installations to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor.