An integer overflow vulnerability exists in the V8 engine of Google Chrome before version 148.0.7778.216. This vulnerability enables remote code execution inside the sandbox environment when a user visits a maliciously crafted HTML page. The issue is classified as high severity with a CVSS 3.1 score of 8.8, reflecting its potential to compromise confidentiality, integrity, and availability. The vulnerability was publicly disclosed on May 28, 2026. The vendor advisory is available but does not explicitly confirm patch availability or remediation level in the provided information.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code within the sandboxed environment of the Chrome browser, potentially leading to full compromise of the browser process. This could result in unauthorized access to sensitive information, modification of data, or denial of service. However, there are no reports of active exploitation in the wild at the time of disclosure.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users and administrators should monitor this advisory for updates and apply any official fixes once available. Until a patch is confirmed, exercising caution when browsing untrusted websites is advisable.