This vulnerability arises from insufficient validation of untrusted input within the GPU component of Google Chrome before version 148.0.7778.168. An attacker who has compromised the renderer process can exploit this flaw to trigger a denial of service condition by delivering a specially crafted HTML page. The issue is recognized as high severity by Chromium security, but no CVSS score or detailed remediation status is included in the provided information. The vulnerability affects desktop versions of Chrome prior to 148.0.7778.168.

The impact is a denial of service condition caused by crafted HTML content when the attacker has control over the renderer process. This can disrupt normal browser operation but does not indicate code execution or data theft based on the provided data. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for current remediation guidance. Since the vulnerability affects versions prior to 148.0.7778.168, updating to version 148.0.7778.168 or later is likely recommended once confirmed by the vendor. No additional mitigation steps are specified in the available data.