Google Chrome Out-of-Bounds Read Vulnerability in GPU Component Allowing Information Disclosure

Vulnerability

A high-severity out-of-bounds read vulnerability has been identified in the GPU component of Google Chrome. This issue affects the stable channel versions prior to 148.0.7778.168 on Mac and Windows. The vulnerability allows a remote attacker, who has compromised the renderer process, to access potentially sensitive information from process memory by exploiting a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from process memory, potentially allowing for further exploitation or information leakage.

Remediation

Users can update to Google Chrome version 148.0.7778.168 for Mac and Windows to address this vulnerability.

Added: May 14, 2026, 8:52 PM
Updated: May 14, 2026, 8:52 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
3.3
remediation
7.7
relevance
8.3
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.