This vulnerability involves a heap buffer overflow in the ANGLE graphics abstraction layer within Google Chrome versions before 148.0.7778.216. An attacker with control over the renderer process could exploit this flaw to perform a sandbox escape, increasing their privileges beyond the renderer sandbox. The issue is recognized as high severity by Chromium security. The vulnerability was publicly disclosed on May 28, 2026. Although a vendor advisory link is provided, no direct confirmation of a patch or remediation level is included in the input data.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to higher privilege code execution on the host system. This elevates the risk from a renderer compromise to a more severe system compromise. There is no indication of known exploits in the wild at the time of disclosure.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until confirmation of a patch, users should exercise caution with untrusted content that could trigger this vulnerability. No vendor advisory content explicitly states that no action is required or that the issue is already mitigated.