This vulnerability involves uninitialized use in the Gamepad feature of Google Chrome on Mac systems before version 148.0.7778.216. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, which could lead to elevated privileges or further compromise of the host system. The issue was publicly disclosed on May 28, 2026, and is tracked as CVE-2026-9972. The vendor advisory URL is provided but does not include explicit patch or remediation details in the input data.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to escape the sandbox environment, potentially leading to greater control over the affected system. This increases the risk of further exploitation beyond the browser sandbox. No known exploits in the wild have been reported at the time of disclosure.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update Google Chrome on Mac to version 148.0.7778.216 or later once available to address this vulnerability. Until then, no specific mitigations are detailed in the provided data.