This vulnerability involves a heap buffer overflow in the Skia graphics library used by Google Chrome before version 147.0.7727.101. Exploitation requires a remote attacker to craft a malicious HTML page that triggers the overflow, potentially leaking sensitive information from the browser's process memory. The issue was publicly disclosed and patched by Google in a stable channel update. No CVSS score is provided, but the Chromium security team rates it as critical.

Successful exploitation can lead to disclosure of potentially sensitive information from Chrome's process memory. There is no indication of code execution or system compromise from the provided data. No known active exploitation has been reported.

A fix is available in Google Chrome version 147.0.7727.101 and later. Users and administrators should update to this version or newer to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for details.