This vulnerability involves a use-after-free condition in the WebGL implementation of Google Chrome before version 148.0.7778.216. Exploitation requires prior compromise of the renderer process and could lead to sandbox escape, allowing an attacker to break out of the browser's security boundaries. The issue is classified as high severity with a CVSS 3.1 base score of 8.3, indicating significant confidentiality, integrity, and availability impacts if exploited. The vulnerability was publicly disclosed on May 28, 2026, with a vendor advisory linked but without explicit patch or remediation details.

Successful exploitation could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to arbitrary code execution with higher privileges than normally permitted within the browser context. This could compromise system security by bypassing sandbox protections. No reports of active exploitation in the wild have been documented.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and update to version 148.0.7778.216 or later once confirmed available. Until a patch is applied, limiting exposure to untrusted web content and disabling WebGL where feasible may reduce risk.