CVE-2026-7340 is an integer overflow vulnerability in the ANGLE graphics engine used by Google Chrome on Windows platforms before version 147.0.7727.138. Exploitation involves a remote attacker delivering a specially crafted HTML page that triggers an out of bounds memory read, potentially leading to information disclosure or other unintended behavior. The vulnerability is classified as medium severity by the Chromium security team. No known exploits are reported in the wild. The vendor has released a stable channel update to fix this issue.

Successful exploitation of this vulnerability could allow a remote attacker to read memory outside the intended bounds, which may lead to information disclosure or instability in the browser process. The impact is considered medium severity by the vendor. There are no reports of active exploitation in the wild.

Google has released an update in Chrome version 147.0.7727.138 that addresses this vulnerability. Users and administrators should apply this official update to remediate the issue. Patch status is confirmed by the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html. No additional mitigation steps are indicated by the vendor.