This vulnerability involves a heap buffer overflow in the ANGLE graphics abstraction layer within Google Chrome before version 148.0.7778.96. An attacker who has compromised the renderer process could exploit this overflow to perform a sandbox escape, which would increase their privileges beyond the renderer sandbox. The vulnerability is identified as high severity by Chromium security but lacks a CVSS score and explicit remediation details in the provided data. The vendor advisory references a stable channel update but does not explicitly confirm if this update addresses the vulnerability.

If exploited, this vulnerability could allow an attacker with control over the renderer process to escape the sandbox, potentially leading to increased privileges and further compromise of the host system. However, there are no known exploits in the wild at this time. The impact is limited to affected versions of Google Chrome prior to 148.0.7778.96.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to the latest stable version of Google Chrome as soon as possible to ensure protection against this vulnerability once a fix is confirmed.