This vulnerability involves a use-after-free condition in the Downloads feature of Google Chrome on macOS before version 148.0.7778.168. Exploitation requires user interaction (UI:R) and can be triggered remotely over the network without privileges. Successful exploitation could lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. The CVSS vector indicates the attack complexity is low and no privileges are required, making it a significant risk if unpatched. The vendor advisory URL is provided but does not explicitly confirm patch availability in the input data.

If exploited, this vulnerability allows remote attackers to execute arbitrary code on affected systems, potentially leading to full compromise of the user's environment. The CVSS score of 8.8 reflects high impact on confidentiality, integrity, and availability. No known active exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for current remediation guidance. Users should update Google Chrome on macOS to version 148.0.7778.168 or later once the update is available. Until then, exercise caution when visiting untrusted websites and avoid interacting with suspicious downloads.