An uninitialized use vulnerability (CWE-457) exists in the Dawn component of Google Chrome before version 149.0.7827.53. This vulnerability enables a remote attacker to obtain potentially sensitive information from process memory by crafting a malicious HTML page. The CVSS 3.1 vector indicates the attack requires no privileges and user interaction, with a network attack vector and high confidentiality impact but no integrity or availability impact. No known exploits in the wild have been reported. The vendor advisory link is provided but does not explicitly confirm patch status or remediation level.

Successful exploitation could lead to unauthorized disclosure of sensitive information from the browser's process memory. There is no impact on integrity or availability. The vulnerability can be triggered remotely without privileges but requires user interaction.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official confirmation, users should update to version 149.0.7827.53 or later once available, as this version is indicated as the fixed release. No other specific mitigations are provided.