An integer overflow vulnerability exists in the Dawn component of Google Chrome on Windows versions before 148.0.7778.96. This vulnerability could be exploited remotely via a crafted HTML page to perform a sandbox escape, potentially allowing an attacker to break out of the browser's security restrictions. The issue is rated with a CVSS 3.1 score of 8.8, indicating high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed but no explicit remediation level or patch confirmation is provided in the available vendor advisory.

Successful exploitation could lead to a sandbox escape, which may allow an attacker to execute code outside the browser sandbox, potentially compromising the host system's security. The CVSS score of 8.8 reflects high impact on confidentiality, integrity, and availability. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 148.0.7778.96 or later once confirmed. Until then, exercise caution when visiting untrusted websites and consider applying any temporary mitigations recommended by Google.