This vulnerability involves an integer overflow in the Skia graphics library used by Google Chrome before version 148.0.7778.216. Exploitation requires prior compromise of the renderer process and enables arbitrary code execution inside the sandbox environment via a crafted HTML page. The issue is classified as high severity with a CVSS 3.1 score of 7.5, indicating network attack vector, high complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. The vendor advisory is referenced but does not explicitly confirm patch status in the provided data.

Successful exploitation allows an attacker with control over the renderer process to execute arbitrary code within the sandbox, potentially leading to further compromise of the affected system. The high CVSS score reflects significant impact on confidentiality, integrity, and availability. There are no known exploits in the wild at the time of this report.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until official fixes are confirmed and applied, users should exercise caution with untrusted web content and consider restricting access to potentially malicious sites. No vendor advisory states that no action is required or that the issue is already mitigated.