This vulnerability involves an out-of-bounds write in the Fonts handling code of Google Chrome before version 148.0.7778.168. Exploitation requires a remote attacker to provide a specially crafted HTML page that triggers the flaw, potentially leading to arbitrary code execution inside the sandbox environment of the browser. The issue is recognized as high severity by Chromium security. The vendor has published a stable channel update presumably addressing this issue, but explicit patch or remediation details are not provided in the input data.

Successful exploitation could allow remote code execution within the sandboxed environment of the Chrome browser, potentially compromising the confidentiality and integrity of the affected system's browser session. However, the sandbox limits the scope of impact. There are no known exploits in the wild at the time of this report.

A stable channel update for Google Chrome version 148.0.7778.168 has been released, which presumably addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. Patch status is not explicitly confirmed in the provided vendor advisory content; therefore, verify the update details via the official Google Chrome release blog linked in the advisory.