This vulnerability involves a heap buffer overflow in the ANGLE graphics abstraction layer used by Google Chrome on Mac platforms. An attacker can exploit this by crafting a malicious HTML page that triggers the overflow, enabling arbitrary code execution inside the sandboxed environment of the browser. The issue affects Chrome versions prior to 147.0.7727.55. The CVSS 3.1 vector indicates the attack requires no privileges and user interaction but can be executed remotely over the network, with high impact on confidentiality, integrity, and availability.

Successful exploitation allows remote attackers to execute arbitrary code within the sandbox of Google Chrome on Mac, potentially compromising the affected system's confidentiality, integrity, and availability. The high CVSS score reflects the severity of this impact. No known active exploits have been reported so far.

A fix is available in Google Chrome version 147.0.7727.55. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for detailed update instructions. No additional mitigations are indicated by the vendor advisory.