This vulnerability involves a use-after-free condition in the HID subsystem of Google Chrome before version 148.0.7778.168. Exploitation requires user interaction with crafted UI gestures on a malicious HTML page, potentially enabling sandbox escape. The issue is recognized as critical by Chromium security. No CVSS score is assigned, and no direct patch or remediation level is specified in the provided data. The vendor advisory URL points to a Chrome stable channel update announcement, which should be consulted for patch confirmation.

If exploited, this vulnerability could allow a remote attacker to escape the Chrome sandbox, potentially leading to execution of arbitrary code outside the browser's restricted environment. This elevates the risk of system compromise beyond the browser context. However, exploitation requires user interaction with specific UI gestures, and no known active exploits have been reported.

Check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for the latest patch and remediation information. Since the vulnerability affects Chrome versions prior to 148.0.7778.168, updating to version 148.0.7778.168 or later is recommended if confirmed by the vendor advisory. Patch status is not explicitly confirmed in the provided data; therefore, verify the vendor advisory for current remediation guidance before taking action.