This vulnerability involves a use-after-free condition in the WebRTC implementation of Google Chrome before version 148.0.7778.179. Exploiting this flaw, a remote attacker can execute arbitrary code by convincing a user to visit a maliciously crafted HTML page. The issue is recognized as high severity by Chromium security but lacks a published CVSS score or detailed remediation status in the provided information. The vulnerability affects the desktop Chrome browser and was publicly disclosed on May 20, 2026.

Successful exploitation could allow remote code execution within the context of the affected Chrome browser, potentially leading to full compromise of the user's browser environment. No known active exploits have been reported, and the impact is limited to affected versions prior to 148.0.7778.179.

The vendor advisory link points to a Chrome stable channel update announcement, indicating that version 148.0.7778.179 addresses this vulnerability. Users should update to Chrome version 148.0.7778.179 or later to remediate this issue. Patch status is not explicitly confirmed in the advisory content provided here; users should verify the update details in the official Google Chrome release notes to ensure remediation.