This vulnerability involves a use-after-free condition in the WebRTC implementation of Google Chrome on Linux platforms before version 148.0.7778.179. Exploitation requires a remote attacker to craft a malicious HTML page that triggers the flaw, potentially leading to arbitrary code execution. The issue is recognized as critical by the Chromium security team. The vendor advisory is available but does not explicitly confirm patch availability or remediation steps. The affected product is Google Chrome on Linux, and the vulnerability was published on May 20, 2026.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system via a crafted HTML page, potentially leading to full compromise of the user's Chrome process. This could result in unauthorized actions within the context of the browser. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html for current remediation guidance. Users should update Google Chrome to version 148.0.7778.179 or later once confirmed. Until then, avoid visiting untrusted or suspicious web pages that could exploit this vulnerability.