An out-of-bounds write vulnerability exists in the GPU subsystem of Google Chrome before version 148.0.7778.216. Exploitation requires prior compromise of the renderer process and involves a crafted HTML page to potentially break out of the sandbox environment, increasing the attacker's privileges beyond the renderer process. The vulnerability is recognized as high severity by Chromium security, but no CVSS score or explicit patch status is provided in the data. The vendor advisory link is given but does not confirm patch availability or remediation steps in the provided content.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to greater control over the host system. This elevates the risk from a renderer compromise to a more serious system-level compromise. There are no known exploits in the wild at the time of this report.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until official fixes are confirmed, users should consider updating to the latest Chrome version once available and exercise caution with untrusted web content. No vendor advisory content explicitly states 'no action required' or 'already mitigated'.