An out-of-bounds write vulnerability exists in the GPU implementation of Google Chrome versions prior to 149.0.7827.53. This memory corruption issue could be exploited remotely via a specially crafted HTML page to escape the browser sandbox, potentially leading to code execution outside the browser's restricted environment. The vulnerability is classified as critical by Chromium security. The vendor advisory points to a stable channel update but does not explicitly state if this update addresses the vulnerability.

Successful exploitation could allow a remote attacker to escape the Chrome sandbox, which may lead to execution of arbitrary code with elevated privileges on the affected system. This undermines the security guarantees of the browser sandbox and could compromise user data or system integrity. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to the latest stable version of Google Chrome as soon as updates are available. Until a confirmed patch is applied, avoid visiting untrusted or suspicious websites that could host crafted HTML content.