This vulnerability involves a use-after-free condition in the iOS version of Google Chrome before 148.0.7778.216. Exploitation requires user interaction through specific UI gestures on a maliciously crafted HTML page, potentially leading to arbitrary code execution. The issue is recognized as high severity by Chromium security but lacks a published CVSS score. The vendor advisory URL is provided but does not explicitly state patch or remediation details.

Successful exploitation could allow a remote attacker to execute arbitrary code on the affected device, compromising the security and integrity of the user's environment. This could lead to unauthorized actions or data compromise on the iOS device running the vulnerable Chrome version. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to version 148.0.7778.216 or later once confirmed available. Until then, avoid engaging with untrusted web content that may attempt to exploit this vulnerability.