An integer overflow vulnerability exists in the ANGLE graphics engine used by Google Chrome before version 148.0.7778.216. Exploitation involves a remote attacker crafting a malicious HTML page that triggers the overflow, enabling access to sensitive information from the browser's process memory. The vulnerability was publicly assigned CVE-2026-10018 and disclosed on May 28, 2026. No CVSS score is provided, and no direct patch or remediation details are included in the input, though a vendor advisory URL is referenced.

Successful exploitation could lead to unauthorized disclosure of sensitive information from Chrome's process memory. This could compromise user data confidentiality but does not indicate code execution or system compromise. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to Chrome version 148.0.7778.216 or later once confirmed. Until then, no specific mitigation steps are provided.