An out of bounds write vulnerability exists in the GPU component of Google Chrome versions before 148.0.7778.216. This vulnerability can be triggered by a remote attacker who has compromised the renderer process, enabling a potential sandbox escape via a crafted HTML page. The vulnerability is rated high severity with a CVSS 3.1 score of 8.3, reflecting high impact on confidentiality, integrity, and availability. The issue was publicly disclosed on May 28, 2026. The vendor advisory is available but does not explicitly state the patch or remediation status.

Successful exploitation could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected system. No confirmed exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until official fixes are confirmed and applied, users should exercise caution when browsing untrusted content and consider limiting exposure to potentially malicious web pages.