An integer overflow vulnerability exists in the Skia graphics library used by Google Chrome before version 147.0.7727.55. Exploiting this flaw, a remote attacker can execute arbitrary code inside the sandbox environment by crafting a malicious HTML page. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory linked confirms the release of a stable channel update that includes the fix.

Successful exploitation allows remote code execution within the Chrome sandbox, potentially compromising browser security and user data confidentiality, integrity, and availability. The vulnerability affects all users running Chrome versions prior to 147.0.7727.55. There are no known exploits in the wild at the time of disclosure.

Users should update Google Chrome to version 147.0.7727.55 or later, where this vulnerability is fixed. The vendor advisory confirms that the issue is addressed in this stable channel update. No additional mitigation steps are required beyond applying the official update.