This vulnerability (CVE-2026-5879) affects Google Chrome on Mac systems before version 147.0.7727.55. It stems from insufficient validation of untrusted input in the ANGLE graphics abstraction layer, enabling remote code execution inside a sandbox when a user visits a maliciously crafted HTML page. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction needed, unchanged scope, and high impact on confidentiality, integrity, and availability. The issue is categorized under CWE-20 (Improper Input Validation). The vendor advisory linked does not explicitly state if the issue is fixed or if users must upgrade, and no patch links are provided in the data.

Successful exploitation could allow a remote attacker to execute arbitrary code within the sandboxed environment of Google Chrome on Mac, potentially compromising user data and system integrity. The high CVSS score indicates critical impacts on confidentiality, integrity, and availability. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should monitor official Google Chrome release notes and update to the latest stable version when available to mitigate this vulnerability. Until confirmation of a fix, exercising caution with untrusted web content is advised.