An out-of-bounds write vulnerability exists in the GPU component of Google Chrome versions before 148.0.7778.216. This vulnerability can be exploited by a remote attacker with control over the renderer process to perform a sandbox escape, which could lead to full compromise of the affected system. The issue is classified with a high severity and a CVSS score of 8.3, reflecting its potential impact on confidentiality, integrity, and availability. The vulnerability was publicly disclosed on May 28, 2026, and Google has published a stable channel update announcement, but explicit patch status is not confirmed in the provided data.

Successful exploitation of this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox, potentially gaining elevated privileges and executing arbitrary code outside the browser's restricted environment. This could lead to full system compromise, affecting confidentiality, integrity, and availability of the affected system. There are no reports of active exploitation in the wild at the time of disclosure.

The vendor has published a stable channel update announcement for Google Chrome version 148.0.7778.216, which presumably addresses this vulnerability. However, the explicit patch or remediation status is not confirmed in the provided data. Users and administrators should update Google Chrome to version 148.0.7778.216 or later as soon as possible to mitigate this vulnerability. Patch status is not yet confirmed in the vendor advisory content provided; check the official Google Chrome release notes and advisories for the latest remediation guidance.