This vulnerability is an uninitialized use issue in the Skia graphics library within Google Chrome versions before 149.0.7827.53. An attacker with control over the renderer process can exploit this flaw to leak data across origins by crafting a malicious HTML page. The vulnerability is tracked as CWE-457 (Use of Uninitialized Variable). There is no explicit remediation level or patch link provided in the data, but a vendor advisory URL is available for further details.

The vulnerability allows an attacker who has already compromised the renderer process to leak sensitive cross-origin data, potentially exposing information that should be isolated by the browser's security model. There is no indication of integrity or availability impact. The CVSS vector indicates no privileges required, low attack complexity, user interaction required, and high confidentiality impact.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. No explicit fix or workaround is stated in the provided data. Users and administrators should monitor the vendor advisory for updates and apply any official fixes once available.