This vulnerability involves a use-after-free condition in the WebView component of Google Chrome on Android before version 148.0.7778.216. Exploitation requires prior compromise of the renderer process and could lead to sandbox escape via a crafted HTML page. The CVSS 3.1 base score is 8.3, reflecting high impact on confidentiality, integrity, and availability, with network attack vector, high attack complexity, no privileges required, and user interaction required. The vendor advisory is available but does not explicitly state patch or remediation details.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to full compromise of the affected system. The vulnerability affects confidentiality, integrity, and availability at a high level. No known exploits are reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to version 148.0.7778.216 or later once confirmed available. Until then, exercise caution with untrusted HTML content and avoid user interaction that could trigger the vulnerability.