This vulnerability involves a use-after-free condition in the Bluetooth functionality of Google Chrome on Mac platforms before version 148.0.7778.216. Exploitation requires user interaction in the form of installing a crafted malicious Chrome extension. Successful exploitation could allow an attacker to perform a sandbox escape, compromising the browser's security boundaries. The issue is classified as critical by Chromium security with a CVSS v3.1 base score of 9.0, reflecting network attack vector, high complexity, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. The vendor has published a stable channel update announcement, but the exact patch status is not explicitly stated in the provided advisory link.

If exploited, this vulnerability could allow an attacker to escape the Chrome sandbox on Mac devices, potentially leading to full compromise of the browser environment and access to sensitive information or system resources. The critical CVSS score reflects severe impact on confidentiality, integrity, and availability. No known active exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users and administrators should update Google Chrome on Mac to version 148.0.7778.216 or later once available. Until confirmed patched, avoid installing untrusted Chrome extensions, especially those requesting Bluetooth permissions.