This vulnerability involves a use-after-free condition in the Base component of Google Chrome before version 148.0.7778.216. Exploitation requires user interaction via a specially crafted HTML page, enabling remote code execution. The CVSS 3.1 score of 8.8 reflects network attack vector, low attack complexity, no privileges required, user interaction needed, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory is available but does not explicitly confirm patch availability or remediation level in the provided data.

Successful exploitation could allow a remote attacker to execute arbitrary code on the affected system, potentially leading to full compromise of the user's environment. The high CVSS score indicates critical impact on system confidentiality, integrity, and availability. No known exploits are reported in the wild, which may reduce immediate risk but does not eliminate the threat.

The vendor has published an advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html. However, the provided data does not explicitly confirm whether a patch or official fix is available. Users and administrators should consult the vendor advisory directly for the latest remediation guidance and apply updates if a fix is released. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.