This vulnerability involves a use-after-free condition in the ANGLE graphics abstraction layer of Google Chrome before version 148.0.7778.216. Exploitation requires user interaction (visiting a malicious HTML page) and can lead to arbitrary code execution inside the sandboxed environment of the browser. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow a remote attacker to execute arbitrary code within the sandbox of the affected Chrome browser, potentially compromising confidentiality, integrity, and availability of the user's environment within the browser context. However, the sandbox limits the scope of impact to the browser environment. No known active exploits have been reported.

The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level in the input data. Therefore, patch status is not yet confirmed — check the Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to Chrome version 148.0.7778.216 or later once confirmed. Until then, exercise caution with untrusted web content.