This vulnerability (CVE-2026-5873) concerns out-of-bounds read and write flaws in the V8 JavaScript engine component of Google Chrome versions prior to 147.0.7727.55. Exploitation could enable remote code execution inside the sandbox via a crafted HTML page. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability with network attack vector and low attack complexity. The issue is categorized under CWE-125 (Out-of-bounds Read) and CWE-787 (Out-of-bounds Write). The vendor advisory URL points to a Chrome stable channel update announcement but does not explicitly confirm patch availability or remediation level in the provided data.

Successful exploitation allows a remote attacker to execute arbitrary code within the sandboxed environment of the Chrome browser, potentially compromising confidentiality, integrity, and availability of the affected system. The high CVSS score (8.8) indicates significant risk if exploited. No known active exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 147.0.7727.55 or later once available. Until confirmed patched, avoid visiting untrusted or suspicious websites to reduce exposure.