This vulnerability involves a use-after-free condition in the ANGLE graphics abstraction layer within Google Chrome versions before 148.0.7778.216. Exploitation could enable a remote attacker to perform a sandbox escape, which compromises the browser's security boundaries. The vulnerability requires user interaction (UI:R) and has a high attack complexity (AC:H). It impacts confidentiality, integrity, and availability (all rated high). The issue was publicly disclosed on May 28, 2026, and a vendor advisory with a stable update is available.

Successful exploitation of this vulnerability could allow an attacker to escape the Chrome sandbox, potentially leading to arbitrary code execution with elevated privileges on the host system. This compromises the confidentiality, integrity, and availability of the affected system. However, no active exploits have been reported in the wild so far.

A stable channel update for Google Chrome has been released to address this vulnerability. Users and administrators should update Chrome to version 148.0.7778.216 or later to mitigate this issue. Since this is not a cloud service, remediation depends on applying the update on client systems. Patch status is confirmed by the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html.