An integer overflow vulnerability exists in the Skia graphics library used by Google Chrome before version 147.0.7727.55. Exploitation of this flaw can lead to remote code execution inside the sandbox environment via a crafted HTML page. The vulnerability is publicly disclosed and assigned CVE-2026-5870. While no CVSS score or explicit remediation level is provided, the vendor advisory references a stable channel update that presumably includes a fix.

Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code within the sandbox of the affected Chrome browser. This could lead to compromise of the browser process, but the impact is contained by sandboxing. There are no reports of active exploitation in the wild.

The vendor advisory linked corresponds to a stable channel update for Chrome. Users should update to version 147.0.7727.55 or later to remediate this vulnerability. Patch status is not explicitly confirmed in the advisory content provided, so users should verify the update details in the official Google Chrome release notes. No additional mitigation steps are indicated by the vendor.