This vulnerability involves an inappropriate implementation in the ANGLE graphics abstraction layer in Google Chrome on Mac before version 148.0.7778.216. Exploitation requires a remote attacker to craft a malicious HTML page that triggers arbitrary code execution inside the sandbox environment of the browser. The flaw affects desktop versions of Chrome on Mac and was publicly disclosed on May 28, 2026. The Chromium security team rates the severity as high. No CVSS score is assigned, and no known exploits are reported in the wild at this time.

Successful exploitation allows remote code execution within the sandboxed environment of Google Chrome on Mac, potentially enabling an attacker to run arbitrary code. This could lead to compromise of the browser process and potentially further impact depending on sandbox escape capabilities. No known exploits in the wild have been reported.

A stable channel update for Google Chrome version 148.0.7778.216 has been released by Google to address this vulnerability. Users should update their Chrome browsers on Mac to this version or later to remediate the issue. Since this is a client-side application, patching the browser is the primary mitigation. No additional vendor advisories indicate alternative mitigations or that no action is required.