An integer overflow vulnerability exists in the V8 engine of Google Chrome before version 149.0.7827.53. Exploitation requires a crafted HTML page that triggers the overflow, enabling remote code execution inside the sandboxed environment of the browser. The issue is recognized by Chromium security with a medium severity rating. The vulnerability was publicly disclosed on June 4, 2026, and Google has released a stable channel update addressing this issue.

Successful exploitation could allow an attacker to execute arbitrary code within the sandbox of the Chrome browser, potentially leading to compromise of the browser process. However, the impact is limited by sandbox restrictions. No known active exploits have been reported.

A fixed version of Google Chrome (149.0.7827.53 or later) is available as indicated by the vendor's stable channel update advisory. Users and administrators should update to this version or later to remediate the vulnerability. Patch status is confirmed by the vendor advisory. No additional mitigation steps are specified or required.