This vulnerability involves an out of bounds read in the GPU processing of Google Chrome on Mac platforms before version 148.0.7778.179. A remote attacker can trigger this by crafting a malicious HTML page that causes Chrome to read memory outside its intended bounds. The issue was assigned CVE-2026-9113 and is classified with high severity by Chromium security. The vulnerability was published on May 20, 2026, but no CVSS score or detailed remediation status is provided in the available data. The vendor advisory URL points to a Chrome stable channel update announcement, but patch status is not explicitly confirmed in the input.

Successful exploitation of this vulnerability could lead to unauthorized reading of memory outside the intended buffer boundaries in the GPU process of Chrome on Mac. This may result in information disclosure or potentially aid in further exploitation chains. However, no known active exploits have been reported, and the exact impact beyond out of bounds memory read is not detailed.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html for current remediation guidance. Users of Google Chrome on Mac should monitor for updates and apply the latest stable version once confirmed to address this vulnerability. Until then, no specific mitigations are provided in the advisory.