This vulnerability involves a use-after-free condition in the Input handling of Google Chrome on Android before version 148.0.7778.168. Exploiting this issue requires prior compromise of the renderer process and could enable an attacker to escape the sandbox environment, increasing the potential impact of an attack. The vulnerability was publicly disclosed on May 14, 2026, and is rated critical by Chromium security. No CVSS score is provided, and no direct patch or remediation information is included in the input data, though a vendor advisory URL is referenced.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to greater control over the affected system. This elevates the severity of an initial compromise by bypassing security boundaries intended to isolate the browser process.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for current remediation guidance. Users of Google Chrome on Android should monitor this advisory closely and apply updates once available to mitigate this critical vulnerability.