Out-of-bounds read/write in Tint in Google Chrome on macOS

CVE-2026-3062 is a High-severity out-of-bounds read and write vulnerability in Tint, the WebGPU shader compiler used internally by Google Chrome. The issue affects Google Chrome on macOS prior to 145.0.7632.116 and can be triggered by a remote attacker via a crafted HTML page. The available reporting indicates that the flaw permits out-of-bounds memory access in the Tint component, resulting in both read and write conditions. Because the bug includes an out-of-bounds write, successful exploitation can corrupt memory in the browser process handling the malicious content; the accompanying out-of-bounds read may also expose memory contents useful for exploit development or information disclosure. Publicly provided details do not identify the specific vulnerable function.