This vulnerability involves a use-after-free condition in the Tab Groups component of Google Chrome before version 148.0.7778.168. Exploitation requires an attacker to deliver malicious network traffic, potentially enabling remote code execution without user interaction. The CVSS vector indicates the attack complexity is high, no privileges or user interaction are required, and the impact on confidentiality, integrity, and availability is high. The issue is publicly disclosed and fixed in the referenced Chrome stable update.

Successful exploitation could lead to arbitrary code execution on the affected system, compromising confidentiality, integrity, and availability of the user's environment. Given the high CVSS score and critical nature of remote code execution, this vulnerability poses a significant risk if unpatched.

A fixed version of Google Chrome (148.0.7778.168 or later) is available as per the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html. Users and administrators should update to this version or later to remediate the vulnerability. There is no indication that temporary workarounds or mitigations are recommended or necessary beyond applying the official update.