This vulnerability involves a use-after-free condition in the UI of Google Chrome on Windows platforms before version 148.0.7778.216. Exploitation requires prior compromise of the renderer process and involves delivering a crafted HTML page to trigger a sandbox escape. The vulnerability has a high CVSS score of 8.3, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requires user interaction. The vendor advisory is available but does not explicitly state patch or remediation details.

Successful exploitation could allow an attacker with control over the renderer process to escape the sandbox, potentially gaining higher privileges or executing arbitrary code outside the browser's restricted environment. This could lead to full system compromise on affected Windows systems running vulnerable Chrome versions. The high CVSS score supports the significant impact on system security.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until an official fix is confirmed, users should avoid visiting untrusted websites and consider upgrading to the latest Chrome version once available.