An out‑of‑bounds read and write flaw exists in the Angle graphics engine used by Google Chrome. The bug can be triggered by a specially crafted HTML page and may let a remote attacker escape the browser’s sandbox, potentially executing code outside the browser process and compromising system confidentiality and integrity.

Google Chrome versions prior to 147.0.7727.138 are affected. The CVE entry does not specify affected platforms, so the flaw applies to any platform that uses the Angle graphics engine in Chrome.

The CVSS score of 8.8 signals high severity, and the EPSS value of less than 1% indicates a very low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. An attacker could serve a malicious web page to an unsuspecting user of an affected Chrome browser to trigger the memory corruption and attempt a sandbox escape, yielding potentially full system compromise.