This vulnerability in Google Chrome affects the ANGLE component, where insufficient validation of untrusted input can lead to arbitrary code execution when processing crafted HTML content. The affected versions are those prior to 148.0.7778.216. The issue was publicly disclosed on May 28, 2026. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation details. The vulnerability is rated as high severity by Chromium security but lacks a CVSS score.

Successful exploitation could allow a remote attacker to execute arbitrary code on the affected system by convincing a user to load a specially crafted HTML page. This could lead to full compromise of the user's environment running the vulnerable Chrome version. However, no known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to the latest Chrome version once an official fix is released. Until then, avoid visiting untrusted or suspicious websites that could host malicious HTML content.