Executive brief
A vulnerability in Google Chrome's XML processing could allow a remote attacker to escape the browser's security sandbox. This occurs if an attacker has already compromised the browser's rendering process and lures a user to a specially crafted webpage. A successful exploit could allow the attacker to gain broader access to the underlying Windows operating system, potentially leading to full system compromise or data theft.
Technical details
An integer overflow vulnerability exists in the XML parsing component of Google Chrome on Windows. The flaw can be triggered by a crafted HTML page. To exploit this, an attacker must first have compromised the renderer process (typically via a separate vulnerability). Once the renderer is compromised, this integer overflow allows the attacker to bypass sandbox restrictions and execute code with the privileges of the browser process on the host operating system. The issue is resolved in Chrome version 148.0.7778.216 and later.
Affected products
- Google Chrome prior to 148.0.7778.216
Timeline
- 2026-05-27: patched: Stable channel update released for desktop
- 2026-05-28: disclosed: CVE published to NVD