This vulnerability (CVE-2026-9999) affects the ANGLE component in Google Chrome on Mac systems before version 148.0.7778.216. It permits remote code execution inside the sandbox via a specially crafted HTML page. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-269 (Improper Privilege Management). The vendor advisory is available but does not explicitly state patch or remediation details.

Successful exploitation allows a remote attacker to execute arbitrary code within the sandbox environment of Google Chrome on Mac, potentially compromising confidentiality, integrity, and availability of the affected system. This could lead to unauthorized actions being performed under the browser's privileges. No known exploits are reported in the wild, reducing immediate risk.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when browsing untrusted websites and avoid interacting with suspicious HTML content. Monitor the vendor advisory for updates regarding patches or mitigations.