This vulnerability (CVE-2026-5915) in Google Chrome's WebML feature results from insufficient validation of untrusted input, enabling a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. The issue affects versions prior to 147.0.7727.55. The CVSS 3.1 score is 8.1, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction needed, unchanged scope, no confidentiality impact, but high integrity and availability impacts. The vulnerability is categorized under CWE-20 (Improper Input Validation). The vendor advisory URL is provided but does not explicitly state patch availability or remediation details.

Successful exploitation can lead to integrity and availability impacts on the affected system due to out-of-bounds memory writes. Confidentiality is not impacted. There are no known active exploits in the wild. The vulnerability could allow attackers to disrupt or manipulate the affected Chrome process remotely via crafted web content.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should ensure their Chrome browser is updated to version 147.0.7727.55 or later, as this version is listed as the fixed release. Until confirmation, users should exercise caution when visiting untrusted websites and avoid interacting with suspicious content that could trigger this vulnerability.