This vulnerability involves an integer overflow in the Skia graphics library used by Google Chrome before version 148.0.7778.216. An attacker with control over the renderer process can leverage this overflow to execute arbitrary code inside the sandbox environment via a crafted HTML page. The issue is recognized as high severity by Chromium security. The vendor advisory is available but does not explicitly state whether a patch or fix has been released. The vulnerability affects desktop versions of Chrome prior to the specified version.

Successful exploitation allows code execution within the sandboxed renderer process, which could lead to further compromise of the browser environment. However, exploitation requires prior compromise of the renderer process. No public exploits are currently known. The impact is considered high due to the potential for arbitrary code execution.

Patch status is not yet confirmed—check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until an official fix is confirmed, users should update to Chrome version 148.0.7778.216 or later once available. No other specific mitigations are indicated by the vendor advisory.