This vulnerability involves a use-after-free condition in the WebGL implementation of Google Chrome on Android devices before version 148.0.7778.216. Exploitation requires user interaction (UI:R) and network access (AV:N) with no privileges required (PR:N). Successful exploitation could lead to a sandbox escape, compromising the browser's security boundaries and potentially allowing an attacker to execute arbitrary code with elevated privileges. The CVSS vector indicates critical impact across confidentiality, integrity, and availability. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level in the input data.

If exploited, this vulnerability could allow a remote attacker to escape the Chrome sandbox on Android devices, leading to full compromise of the browser environment. This includes potential unauthorized access to sensitive information, modification of data, and disruption of service. The critical CVSS score reflects the high severity of this impact. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until official confirmation of a patch or update is available, users should exercise caution when visiting untrusted websites and consider disabling WebGL if possible as a temporary mitigation.