Out-of-bounds read in Google Chrome CSS

Successful exploitation allows an attacker to cause out-of-bounds memory access in the browser process. Based on the provided content and associated CVSS metadata, impact may include disclosure of sensitive memory contents, browser instability or denial of service, and potentially contribution to further exploitation chains. The broader Chrome update context notes that high-severity browser flaws of this class may enable code execution or security bypass in some scenarios, but the specific confirmed impact for this CVE in the provided material is out-of-bounds memory read via crafted HTML content.

Apply the vendor update as the primary mitigation. Until patching is complete, reduce exposure by limiting access to untrusted or attacker-controlled websites and HTML content, and ensure users restart Chrome after the update is installed because protections do not become active until relaunch. In enterprise environments, prioritize rapid rollout of the fixed Chrome version.

Update Google Chrome to version 146.0.7680.165 or later. The provided content states that versions prior to 146.0.7680.165 are affected. For managed environments, deploy the corresponding stable-channel update through enterprise patch management processes and ensure browsers are restarted so the fix takes effect.