This vulnerability involves a use-after-free condition in the ANGLE graphics abstraction layer within Google Chrome before version 148.0.7778.216. Exploitation requires prior compromise of the renderer process and can lead to sandbox escape, allowing an attacker to break out of Chrome's security boundaries. The CVSS 3.1 base score is 8.3, reflecting high impact on confidentiality, integrity, and availability. The vulnerability requires user interaction and has high attack complexity. Google has released a stable channel update addressing this issue.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to full system compromise or further attacks beyond the browser context. The vulnerability affects confidentiality, integrity, and availability at a high level. No known exploits are reported in the wild as of the publication date.

A fix is available in Google Chrome version 148.0.7778.216. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for detailed update instructions. No additional mitigation steps are indicated by the vendor advisory.