This vulnerability involves a use-after-free condition in the WebRTC implementation of Google Chrome on Linux platforms before version 148.0.7778.179. Exploitation requires user interaction, specifically visiting a maliciously crafted HTML page, which can lead to remote code execution. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges and with low attack complexity, but requires user interaction. The impact includes high confidentiality, integrity, and availability consequences. The vendor has published a stable channel update to remediate this issue.

Successful exploitation of this vulnerability allows a remote attacker to execute arbitrary code on the affected system, potentially leading to full compromise of the user's environment. The CVSS score of 8.8 reflects high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported, but the critical nature of remote code execution warrants prompt attention.

A fix is available in Google Chrome version 148.0.7778.179 and later. Users and administrators should update affected Chrome installations on Linux to this version or newer to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html for detailed update instructions.