This vulnerability involves an out-of-bounds write in the ANGLE graphics abstraction layer used by Google Chrome. It affects Chrome versions before 148.0.7778.216 and enables remote code execution through crafted HTML content. The issue was publicly disclosed on May 28, 2026, with a vendor advisory linked but without explicit patch or remediation details. The vulnerability is rated critical by Chromium security, indicating a high risk if exploited.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system by delivering a malicious HTML page. This can lead to full compromise of the user's browser context and potentially the underlying system depending on sandboxing and other mitigations. No active exploitation has been reported so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users and administrators should monitor official Google Chrome update channels and apply updates promptly once a fix is released. Until then, exercise caution when visiting untrusted websites.