Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
https://www.securityweek.com/chrome-148-update-patches-critical-vulnerabilities/
https://issues.chromium.org/issues/502636904
https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html