This vulnerability involves an out-of-bounds read in the WebRTC implementation of Google Chrome on Mac platforms before version 148.0.7778.216. Exploiting this flaw could enable a remote attacker to read potentially sensitive information from the browser's process memory by delivering a specially crafted HTML page. The issue was disclosed publicly with a high severity rating by the Chromium security team. The vendor advisory linked references a stable channel update but does not explicitly confirm the patch status for this specific vulnerability. No CVSS score is assigned to this CVE.

Successful exploitation could lead to unauthorized disclosure of sensitive information from Chrome's process memory on affected Mac systems. This could compromise user privacy and security depending on the nature of the leaked data. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users should update to Chrome version 148.0.7778.216 or later once confirmed to contain the fix. Until then, caution is advised when visiting untrusted websites that could host crafted HTML content targeting this vulnerability.