An out‑of‑bounds memory write was discovered in Skia, the graphics library used by Google Chrome on macOS. The flaw is triggered by a crafted HTML page that an attacker can deliver to a user who already has a compromised renderer process. If exploited, the write may corrupt critical memory structures and enable the attacker to escape the renderer sandbox, potentially giving full system control on the victim’s machine. The weakness is classified as CWE‑787, reflecting a missing bounds check before a memory write.

Google Chrome for macOS versions prior to 149.0.7827.53 are affected. The issue exists only in the stable channel on macOS; any release 149.0.7827.52 or earlier can be exploited. A patch was released with the 149.0.7827.53 update, which removes the Skia buffer overshoot.

The vulnerability has a high severity rating, and although the EPSS score is not available, the fact that it is not listed in the CISA KEV catalog suggests no widespread public exploits have been reported yet. Nevertheless, any compromised renderer process—such as from malicious web content—could be leveraged to perform a sandbox escape, granting the attacker complete control over the user’s device if the exploit succeeds. Organizations should treat the risk as high in environments where users routinely visit untrusted web content.