CVE-2026-10992 is a medium severity vulnerability in Google Chrome's Animation feature affecting versions before 149.0.7827.53. The root cause is insufficient data validation, which enables a remote attacker to extract potentially sensitive information from process memory via a specially crafted HTML page. The vulnerability has a CVSS 3.1 base score of 6.5, with an attack vector of network, low attack complexity, no privileges required, user interaction required, and confidentiality impact rated high. There are no known exploits in the wild. The vendor advisory linked does not explicitly confirm patch availability or remediation status.

An attacker who successfully exploits this vulnerability can obtain sensitive information from the process memory of the affected Chrome browser. The confidentiality of data is impacted, but there is no effect on integrity or availability. Exploitation requires user interaction and can be performed remotely over the network.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites and avoid interacting with suspicious content that could trigger the vulnerability.