This vulnerability involves a use-after-free condition in the GPU process of Google Chrome on Mac platforms before version 148.0.7778.216. Exploitation requires prior compromise of the renderer process and can lead to arbitrary code execution via a specially crafted HTML page. The issue was publicly disclosed on May 28, 2026, with a vendor advisory linked but without explicit patch or remediation details. The vulnerability is rated high severity by Chromium security but lacks a CVSS score. It is not known to be actively exploited in the wild.

Successful exploitation allows an attacker with control over the renderer process to execute arbitrary code on the affected system, potentially leading to full compromise of the Chrome process and escalation of privileges within the user context. This can undermine system security and user data confidentiality on Mac devices running vulnerable Chrome versions.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to Chrome version 148.0.7778.216 or later once available. Until then, limiting exposure to untrusted web content and ensuring renderer process security may reduce risk.