An integer overflow in the V8 engine of Google Chrome before version 148.0.7778.216 enables remote code execution inside the sandbox via crafted HTML content. The vulnerability was publicly disclosed on May 28, 2026, with a high severity rating from Chromium security. The vendor advisory points to a stable channel update but does not explicitly confirm patch availability or remediation level. No CVSS score is provided.

Successful exploitation could allow a remote attacker to execute arbitrary code inside the Chrome sandbox, potentially compromising browser security and user data isolation. The impact is considered high severity by the Chromium security team. There are no known exploits in the wild at the time of disclosure.

The vendor has published a stable channel update announcement for Chrome, which likely includes a fix for this vulnerability. However, patch status is not explicitly confirmed in the advisory. Users should update to Chrome version 148.0.7778.216 or later once available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.