This vulnerability involves a use-after-free condition in the Document Object Model (DOM) of Google Chrome before version 148.0.7778.216. Exploitation requires a remote attacker to craft an HTML page that triggers the flaw, enabling arbitrary code execution inside the sandboxed environment of the browser. The issue is recognized as high severity by Chromium security but lacks a CVSS score. The vulnerability was publicly disclosed on May 28, 2026, and a vendor advisory references a stable channel update that presumably includes a fix.

Successful exploitation could allow remote attackers to execute arbitrary code within the sandbox of the affected Chrome browser, potentially leading to unauthorized actions or compromise of the browser environment. However, no known exploits in the wild have been reported at the time of disclosure.

A vendor advisory is available referencing a stable channel update for Chrome. Users should update to version 148.0.7778.216 or later to remediate this vulnerability. Patch status is not explicitly confirmed in the advisory content provided, but the presence of a stable channel update strongly indicates that an official fix is available. Users should apply the update promptly to mitigate risk.