This vulnerability involves a use-after-free condition in the Glic component of Google Chrome before version 148.0.7778.216. Exploitation requires a remote attacker to craft a malicious HTML page that triggers arbitrary code execution inside the sandbox environment of the browser. The issue was publicly disclosed on May 28, 2026, and is rated as high severity by Chromium security. Although no explicit patch status is stated in the input, the vendor advisory URL corresponds to a stable channel update likely containing the fix.

Successful exploitation allows remote code execution within the sandboxed environment of Google Chrome, potentially enabling an attacker to run arbitrary code on the affected system. This can lead to compromise of the browser process and possibly further system impact depending on sandbox escapes, though such details are not provided here. No known exploits in the wild have been reported at the time of this disclosure.

A fix is available as indicated by the vendor's stable channel update advisory (https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html). Users should update Google Chrome to version 148.0.7778.216 or later to remediate this vulnerability. No additional mitigation steps are specified in the advisory.