This vulnerability involves a use-after-free condition in the Input handling of Google Chrome before version 148.0.7778.216. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, which could lead to elevated privileges or further compromise of the host system. The issue is rated high severity with a CVSS 3.1 score of 8.3, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity. The official Google Chrome stable channel update released on May 28, 2026, addresses this vulnerability.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the Chrome sandbox, potentially leading to execution of arbitrary code with higher privileges on the host system. This elevates the risk of further system compromise beyond the browser sandbox. No active exploitation has been reported so far.

A fixed version of Google Chrome (148.0.7778.216) has been released by Google to address this vulnerability. Users and administrators should update to this version or later to mitigate the risk. Since this is a client-side application, patching the browser is the primary and recommended mitigation. No additional vendor advisories indicate alternative mitigations or that no action is required.