This vulnerability (CVE-2026-7346) exists in the Tint component of Google Chrome versions prior to 147.0.7727.138. It allows a remote attacker to cause out-of-bounds memory access through a specially crafted HTML page. The CVSS v3.1 score is 8.1, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality and integrity. The vulnerability is categorized under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). The vendor advisory linked does not explicitly state patch availability or remediation level.

Successful exploitation of this vulnerability could allow a remote attacker to access memory outside the intended bounds, potentially leading to disclosure or modification of sensitive information within the browser process. The impact affects confidentiality and integrity but does not affect availability. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when browsing untrusted websites and consider updating to the latest Chrome version once available.