An integer overflow vulnerability exists in the ANGLE component of Google Chrome before version 148.0.7778.96. This vulnerability allows a remote attacker to leak cross-origin data by using a specially crafted HTML page. The issue was publicly disclosed on May 6, 2026, and is classified as medium severity by Chromium security. The affected version is 148.0.7778.96, suggesting that the vulnerability is addressed in this release. No detailed exploitation techniques or impact beyond data leakage are described.

The vulnerability enables remote attackers to leak cross-origin data, which could compromise user privacy and data confidentiality. There are no reports of active exploitation in the wild. The impact is limited to information disclosure rather than code execution or system compromise.

The vulnerability is addressed in Google Chrome version 148.0.7778.96. Users and administrators should update to this version or later to remediate the issue. The vendor advisory linked corresponds to a stable channel update that includes this fix. Since this is not a cloud service, remediation depends on applying the update. Patch status is effectively confirmed by the presence of the fixed version number. No additional mitigation steps are indicated by the vendor.