This vulnerability involves a use-after-free condition in the Mojo IPC system within Google Chrome before version 148.0.7778.168. Exploitation could enable a remote attacker to execute a sandbox escape via a specially crafted HTML page. The vulnerability is publicly disclosed and assigned CVE-2026-8580. No CVSS score is provided, and no direct patch link is included in the data, but the vendor advisory points to a stable channel update that presumably fixes the issue.

Successful exploitation could allow an attacker to break out of the Chrome sandbox, potentially leading to execution of arbitrary code with elevated privileges on the host system. This increases the risk of further compromise beyond the browser context. However, no known exploits in the wild have been reported at this time.

Google has released a stable channel update for Chrome (version 148.0.7778.168) that addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. Patch status is not explicitly confirmed in the advisory text provided, but the stable update strongly indicates an official fix is available.