This vulnerability involves a heap buffer overflow in the WebML feature of Google Chrome before version 147.0.7727.55. Exploitation requires a remote attacker to craft a malicious HTML page that triggers the overflow, potentially leading to arbitrary code execution within the context of the browser. The issue is recognized as critical by Chromium security. The vendor advisory is available but does not explicitly state the patch or remediation status in the provided data.

Successful exploitation could allow remote attackers to execute arbitrary code on the affected system via a specially crafted HTML page. This could lead to full compromise of the user's browser environment. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to version 147.0.7727.55 or later if a fix is provided there. Until confirmed, avoid visiting untrusted or suspicious websites that could host malicious HTML content targeting this vulnerability.