cve-2026-5275

CVE-2026-5275 is a heap buffer overflow vulnerability in ANGLE, a graphics abstraction layer used by Chromium-based browsers. The flaw can be triggered by a crafted HTML page and, on affected Mac builds, could permit remote code execution. Google addressed the issue in Chrome version 146.0.7680.178. Microsoft's Security Update Guide mirrors the upstream disclosure, confirming the scope and downstream importance for enterprises tracking browser risk. This is a memory-corruption issue in a core graphics path that lives directly on the web attack surface, making patching a priority.