An out of bounds read vulnerability exists in the GPU component of Google Chrome on Mac and Windows before version 148.0.7778.168. This vulnerability permits a remote attacker, who has already compromised the renderer process, to read potentially sensitive information from process memory via a crafted HTML page. The issue is recognized as high severity by Chromium security. The vulnerability affects Chrome versions prior to 148.0.7778.168, and the vendor advisory URL suggests that the stable channel update includes the fix, although explicit patch details are not provided in the input.

A remote attacker with control over the renderer process can exploit this vulnerability to read memory outside the intended bounds, potentially exposing sensitive information from the process memory. This could lead to information disclosure but requires prior compromise of the renderer process. No known active exploitation has been reported.

Updating Google Chrome to version 148.0.7778.168 or later is recommended, as the vulnerability affects versions prior to this release. The vendor advisory linked indicates a stable channel update addressing this issue. Patch status is not explicitly confirmed in the input, so users should verify the update from the official Google Chrome release notes and apply the latest stable version promptly.