An out-of-bounds write vulnerability exists in the ANGLE graphics component of Google Chrome versions prior to 148.0.7778.216. This vulnerability allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape by delivering a crafted HTML page. The issue is classified as high severity with a CVSS score of 8.3, reflecting its potential impact on confidentiality, integrity, and availability. The vulnerability was publicly disclosed on May 28, 2026, and affects desktop Chrome installations. The official Google Chrome release blog is the authoritative source for patch and remediation details.

Successful exploitation could allow an attacker with control over the renderer process to escape the Chrome sandbox, potentially leading to arbitrary code execution with higher privileges. This could compromise the confidentiality, integrity, and availability of the affected system. No known exploits are reported in the wild at the time of disclosure.

Patch status is not yet confirmed — check the official Google Chrome stable channel update blog at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to Chrome version 148.0.7778.216 or later once available. Until patched, limiting exposure to untrusted web content and exercising caution with HTML content may reduce risk.