An integer overflow in the V8 engine of Google Chrome before version 149.0.7827.53 enables remote code execution inside the sandbox via a crafted HTML page. The vulnerability has a high CVSS score of 8.8, indicating it is remotely exploitable without privileges and requires user interaction. The issue affects desktop Chrome and was publicly disclosed on June 4, 2026. The vendor advisory is available but does not explicitly confirm patch status in the provided information.

Successful exploitation allows an attacker to execute arbitrary code within the sandbox environment of the Chrome browser, potentially compromising confidentiality, integrity, and availability of the affected system. The high CVSS score reflects significant impact if exploited. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 149.0.7827.53 or later once confirmed. Until then, exercise caution when browsing untrusted websites and avoid interacting with suspicious content.