This vulnerability involves an out of bounds read in the GPU process of Google Chrome on Mac platforms before version 148.0.7778.179. An attacker can exploit this by crafting a malicious HTML page that triggers the flaw, potentially leaking sensitive information from the browser's memory space. The issue was publicly disclosed on May 20, 2026, with a vendor advisory link provided but no direct confirmation of a patch or fix status. The vulnerability is classified as medium severity by Chromium security.

Successful exploitation could allow a remote attacker to obtain potentially sensitive information from the Chrome GPU process memory on affected Mac systems. There is no indication of code execution or broader system compromise. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html for current remediation guidance. Users should update to Chrome version 148.0.7778.179 or later once available. Until then, no specific mitigations are documented by the vendor.