This vulnerability involves a use-after-free flaw in the Core of Google Chrome on Windows platforms before version 148.0.7778.168. An attacker who has already compromised the renderer process could exploit this flaw to perform a sandbox escape, increasing the potential impact of a renderer compromise. The issue is triggered via a crafted HTML page. The vulnerability is publicly disclosed and assigned CVE-2026-8542, with a high severity rating by Chromium security. No CVSS score or explicit patch information is included in the provided data.

If exploited, this vulnerability could allow an attacker with control over the renderer process to break out of the Chrome sandbox, potentially leading to greater system compromise beyond the browser sandbox restrictions. This elevates the risk associated with renderer process compromises. No known exploits in the wild have been reported at the time of this disclosure.

The vendor advisory URL is provided but does not explicitly confirm patch availability or remediation status in the input data. Since the affected version is prior to 148.0.7778.168, updating to version 148.0.7778.168 or later is implied as the fix. Users should verify the vendor advisory for official patch and update guidance. Patch status is not yet confirmed from the provided data — check the vendor advisory for current remediation guidance.