An integer overflow vulnerability exists in the Dawn component of Google Chrome before version 149.0.7827.53. This vulnerability can be triggered by a remote attacker who has compromised the renderer process, enabling a potential sandbox escape via a crafted HTML page. The issue is classified with a high severity and a CVSS score of 8.3, reflecting its potential impact on confidentiality, integrity, and availability. The vulnerability was publicly disclosed on June 4, 2026. The vendor advisory is available but does not explicitly state patch or remediation details.

Successful exploitation could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to elevated privileges and further compromise of the host system. The impact includes full confidentiality, integrity, and availability loss as indicated by the CVSS vector. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted content and consider applying any available Chrome updates promptly once released.