This vulnerability involves a use-after-free condition in the Document Object Model (DOM) of Google Chrome before version 148.0.7778.179. Exploitation requires user interaction (UI:R) and can lead to remote code execution with high impact on confidentiality, integrity, and availability. The attack vector is network-based with low attack complexity and no privileges required. The vulnerability affects the stable desktop channel of Chrome and is addressed in the update referenced by the vendor advisory.

Successful exploitation allows remote attackers to execute arbitrary code inside the sandbox environment of the browser, potentially compromising the confidentiality, integrity, and availability of the affected system. The high CVSS score (8.8) reflects the critical impact of this vulnerability if exploited.

The vendor advisory linked (https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html) should be consulted for update instructions. Although the patch status is not explicitly stated in the provided data, the advisory URL indicates a stable channel update, which typically includes fixes for such vulnerabilities. Therefore, users should update Google Chrome to version 148.0.7778.179 or later to remediate this issue. Patch status is not yet confirmed explicitly in the input data — check the vendor advisory for current remediation guidance.