Executive brief
A security vulnerability exists in Google Chrome's graphics engine that could allow a malicious website to bypass the browser's security protections. If a user visits a specially crafted webpage, an attacker could potentially gain unauthorized access to the underlying operating system, moving beyond the restricted 'sandbox' environment where the browser normally operates. This could lead to the theft of sensitive data or the installation of malicious software on the user's computer.
Technical details
This vulnerability involves an out-of-bounds (OOB) read and write flaw within ANGLE (Almost Native Graphics Layer Engine), the graphics abstraction layer used by Google Chrome. The issue is triggered when the browser processes a specially crafted HTML page, allowing a remote attacker to read or write memory outside of intended buffers. This memory corruption can be leveraged to achieve a sandbox escape, potentially leading to arbitrary code execution on the host system. The attack requires no special privileges but does require user interaction (visiting a malicious site). The vulnerability is addressed in Chrome version 147.0.7727.138 for Windows, Mac, and Linux.
Affected products
- Google Chrome prior to 147.0.7727.138
Timeline
- 2026-04-01: other: Reported to Chrome by Google researchers
- 2026-04-28: patched: Fixed in Chrome version 147.0.7727.138
- 2026-04-28: disclosed: Public advisory published by Google