An integer overflow in the ANGLE graphics engine within Google Chrome on Windows prior to version 146.0.7680.178 enables a remote attacker, with control over the renderer process, to trigger an out-of-bounds memory write by delivering a specially crafted HTML page. This vulnerability could lead to arbitrary code execution or browser compromise. The CVSS 3.1 base score is 7.5, reflecting high impact on confidentiality, integrity, and availability, but requires user interaction and has high attack complexity.

Successful exploitation allows an attacker who has compromised the renderer process to write outside the intended memory bounds, potentially leading to arbitrary code execution or browser compromise. This can affect confidentiality, integrity, and availability of the affected system. However, exploitation requires prior compromise of the renderer process and user interaction.

Users should update Google Chrome to version 146.0.7680.178 or later, where this vulnerability is fixed. Since this is a client-side application vulnerability, applying the official update is the recommended remediation. Patch status is confirmed by the affectedVersions field indicating the fixed version. No additional vendor advisory content was provided, so check Google's official security bulletins for confirmation and further guidance.