This vulnerability involves an out-of-bounds write in the GPU process of Google Chrome before version 147.0.7727.101. An attacker who has compromised the GPU process could exploit this flaw to perform a sandbox escape by delivering a crafted HTML page, potentially leading to elevated privileges or further system compromise. The issue is categorized under CWE-787 (Out-of-bounds Write) and has a CVSS v3.1 base score of 8.3, reflecting high attack complexity and significant impact. No confirmed patch or remediation level is provided in the vendor advisory, though a Chrome stable channel update blog is referenced.

Successful exploitation could allow a remote attacker with control over the GPU process to escape the sandbox environment in Chrome, potentially leading to full system compromise or execution of arbitrary code with elevated privileges. The vulnerability affects confidentiality, integrity, and availability of the affected system. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html for current remediation guidance. Until an official fix is released, users should exercise caution when browsing untrusted sites and consider limiting GPU process exposure. No vendor advisory states that the issue is already mitigated or requires no action.