This vulnerability (CVE-2026-8585) affects the Media implementation in Google Chrome on iOS versions before 148.0.7778.168. It enables a remote attacker, who has compromised the renderer process, to trigger an out-of-bounds memory read by delivering a specially crafted HTML page. The issue is categorized as medium severity by Chromium security. No CVSS score or detailed remediation information is currently available in the provided data. The vendor advisory link points to a Chrome stable channel update announcement but does not explicitly confirm if this vulnerability is fixed in that update.

An attacker with control over the renderer process can exploit this vulnerability to read memory out of bounds, which may lead to information disclosure or further compromise of the browser process. However, exploitation requires prior compromise of the renderer process, limiting the initial attack vector. There are no known exploits in the wild as per the data provided.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for current remediation guidance. Since the vulnerability affects versions prior to 148.0.7778.168, updating to this version or later is recommended if confirmed by the vendor advisory. No other specific mitigations are indicated in the available information.