This vulnerability involves a use-after-free condition in the XR (Extended Reality) functionality of Google Chrome on Windows platforms before version 148.0.7778.216. Exploitation requires prior compromise of the renderer process and could lead to sandbox escape, increasing the attacker's privileges beyond the renderer sandbox. The issue is recognized as critical by Chromium security. No CVSS score or explicit remediation level is provided in the available data. The vendor advisory URL is given but does not contain patch or mitigation details in the provided input.

If exploited, this vulnerability could allow an attacker with control over the renderer process to break out of the sandbox environment, potentially leading to further system compromise. This elevates the severity of the initial renderer compromise by enabling broader access to the host system. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to Chrome version 148.0.7778.216 or later once available to address this issue. Until then, no specific mitigations are detailed in the provided data.