This vulnerability involves a use-after-free condition in the WebRTC implementation of Google Chrome before version 148.0.7778.216. Exploitation requires a remote attacker to craft a malicious HTML page that triggers arbitrary code execution inside the sandbox environment of the browser. The issue was publicly disclosed on May 28, 2026, and is recognized as a high-severity security flaw by Chromium security. No CVSS score or direct remediation level is specified in the provided data. The vulnerability affects desktop versions of Chrome prior to the fixed version 148.0.7778.216.

Successful exploitation could allow a remote attacker to execute arbitrary code within the sandboxed environment of the affected Chrome browser. This could lead to unauthorized actions or compromise of the browser process, though sandbox restrictions limit broader system impact. There are no known exploits in the wild at the time of disclosure.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to Chrome version 148.0.7778.216 or later once available to address this vulnerability. Until then, no specific mitigations are detailed in the provided data.