This vulnerability involves type confusion in the graphics subsystem of Google Chrome on Linux and ChromeOS platforms before version 148.0.7778.179. An attacker who has compromised the renderer process can exploit this flaw by delivering a crafted video file, potentially enabling sandbox escape. The sandbox escape could allow the attacker to execute code with higher privileges than normally permitted within the browser sandbox. The CVSS vector indicates the attack requires network access, high attack complexity, no privileges, and user interaction, with high impact on confidentiality, integrity, and availability.

Successful exploitation could allow a remote attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to arbitrary code execution with elevated privileges on the host system. This elevates the risk of system compromise beyond the browser sandbox containment. The vulnerability affects Linux and ChromeOS users running vulnerable Chrome versions prior to 148.0.7778.179. No known active exploits have been reported.

The vendor advisory URL indicates a stable channel update was released on 2026-05-20; users should update Google Chrome to version 148.0.7778.179 or later to remediate this vulnerability. Patch status is not explicitly confirmed in the advisory text provided, so users should verify the update availability and apply it promptly. No alternative mitigations or workarounds are specified.