This vulnerability involves a use-after-free condition in the UI of Google Chrome before version 148.0.7778.216. Exploitation requires user interaction (UI:R) and a high attack complexity (AC:H). If successfully exploited, it could lead to a sandbox escape, compromising confidentiality, integrity, and availability of the affected system. The CVSS vector indicates network attack vector, no privileges required, and scope change, highlighting the potential severity of the issue.

Successful exploitation could allow a remote attacker to break out of the Chrome sandbox, potentially leading to full system compromise including unauthorized access to sensitive information and disruption of system operations. The impact affects confidentiality, integrity, and availability at a high level as per the CVSS score.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when browsing untrusted websites and avoid interacting with suspicious content that could trigger this vulnerability.