CVE-2026-103622 is a use-after-free vulnerability in the SVG processing of Google Chrome before version 154.0.8037.97. Exploitation involves a remote attacker delivering a specially crafted HTML page that triggers the use-after-free condition, enabling arbitrary code execution inside the sandboxed environment of the browser. The vulnerability is recognized as high severity by Chromium security. No known exploits in the wild have been reported at the time of publication.

Successful exploitation could allow a remote attacker to execute arbitrary code within the sandbox of the affected Chrome browser, potentially leading to unauthorized actions constrained by sandbox restrictions. The impact is limited to the sandbox environment and does not imply full system compromise without further escalation.

Users should update Google Chrome to version 154.0.8037.97 or later, where this vulnerability is fixed. Since this is a client-side vulnerability in a non-cloud service product, patching the browser is the recommended remediation. No additional vendor advisory content is provided to indicate alternative mitigations or that no action is required.