The vulnerability is an out‑of‑bounds memory write in the Dawn rendering engine of Google Chrome on macOS. A crafted HTML page can trigger the overflow, which the Chromium team rates as high severity. Based on the description, it is inferred that the memory overwrite could allow an attacker to corrupt local data structures and potentially take arbitrary code execution on the affected machine.

Affected are users of Google Chrome running on macOS, specifically versions prior to 148.0.7778.216. No other platforms or products are impacted according to the current CNA data.

The CVSS score of 8.8 indicates a high severity risk. The EPSS score is less than 1%, indicating a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Remote exploitation requires the user to load the malicious HTML from an attacker‑controlled source, such as a compromised website. Based on the description, it is inferred that once the overflow is triggered the attacker could achieve memory corruption that may lead to code execution or other severe consequences. No public exploit is known, but the high severity warrants prompt remediation.