This vulnerability is a heap buffer overflow (CWE-122) in the ANGLE graphics abstraction layer used by Google Chrome. It affects Chrome versions before 147.0.7727.101 and can be triggered remotely via a maliciously crafted HTML page. Successful exploitation could lead to sandbox escape, compromising browser security boundaries. The CVSS 3.1 base score is 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and complete impact on confidentiality, integrity, and availability. The vendor has published a stable channel update to fix this issue.

If exploited, this vulnerability allows a remote attacker to escape the Chrome sandbox, potentially leading to full compromise of the affected system's security context. The impact includes complete loss of confidentiality, integrity, and availability of the system running the vulnerable Chrome version. No active exploitation has been observed yet.

A fix is available in Google Chrome version 147.0.7727.101 and later. Users and administrators should update to this version or newer immediately to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for detailed update instructions.