An integer overflow vulnerability exists in the GPU processing within Google Chrome on Linux and ChromeOS platforms before version 148.0.7778.168. Exploitation requires prior compromise of the renderer process and could enable sandbox escape through a specially crafted HTML page. The vulnerability was publicly disclosed on May 14, 2026, and is rated high severity by Chromium security. No CVSS score or explicit patch status is included in the provided information, but the affected version indicates that updating to 148.0.7778.168 or later is relevant.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to break out of the browser sandbox, potentially leading to further system compromise on Linux and ChromeOS devices running vulnerable Chrome versions. There are no known exploits in the wild at the time of disclosure.

The vendor advisory URL points to a Chrome stable channel update announcement, implying that version 148.0.7778.168 includes the fix. Users should update to Chrome version 148.0.7778.168 or later to remediate this vulnerability. Patch status is not explicitly confirmed in the advisory content provided, so users should verify the update details in the official Google Chrome release notes linked. No additional mitigation steps are specified.