This vulnerability involves an out-of-bounds write in the ANGLE graphics abstraction layer within Google Chrome versions before 148.0.7778.216. Exploitation requires prior compromise of the renderer process and could enable sandbox escape, increasing the attacker's privileges beyond the renderer sandbox. The vulnerability was publicly disclosed on May 28, 2026, with a high severity rating from Chromium. No CVSS score or detailed remediation status is provided in the available data. The vendor advisory linked is a stable channel update announcement without explicit patch confirmation for this CVE.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to greater control over the host system. This elevates the risk from a renderer compromise to a more severe system compromise. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until confirmation of a fix, users should update to the latest Chrome version as soon as possible and follow any additional vendor instructions. No vendor advisory explicitly states that no action is required or that the issue is already mitigated.