This vulnerability involves an out-of-bounds read in the ANGLE graphics abstraction layer within Google Chrome before version 148.0.7778.216. Exploitation requires a remote attacker to present a specially crafted HTML page that triggers the memory read, potentially exposing sensitive data from the browser's process memory. The issue was publicly disclosed on May 28, 2026, with a high severity rating assigned by Chromium security. No CVSS score or detailed remediation information is currently available from the vendor advisory.

Successful exploitation could lead to unauthorized disclosure of potentially sensitive information from the memory space of the affected Chrome process. There is no indication of code execution or broader system compromise. No known active exploits have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should monitor for official updates from Google and apply them promptly once available.