This vulnerability involves a heap buffer overflow in the WebML feature of Google Chrome before version 147.0.7727.55. Exploitation requires an attacker to serve a specially crafted HTML page that triggers the overflow, potentially allowing access to sensitive information from the browser's process memory. The issue has been publicly disclosed and is assigned CVE-2026-5869. Although no CVSS score is provided, Chromium classifies the severity as high. The vendor advisory linked corresponds to a stable channel update, implying the fix is included in or after version 147.0.7727.55.

Successful exploitation can lead to disclosure of potentially sensitive information from the memory of the Chrome process. This could compromise user privacy or security depending on the nature of the leaked data. There is no indication of code execution or system compromise from the provided information. No known active exploits have been reported.

Users should update Google Chrome to version 147.0.7727.55 or later to remediate this vulnerability. The vendor advisory linked corresponds to a stable channel update that addresses this issue. Since this is a client-side vulnerability in desktop Chrome, applying the official update is the recommended and effective mitigation. Patch status is confirmed by the affected version information and vendor advisory link.