This vulnerability arises from insufficient data validation in the Animation feature of Google Chrome versions before 149.0.7827.53. An attacker can exploit this by delivering a crafted HTML page that triggers the flaw, potentially leaking sensitive information from the browser's process memory. The issue is recognized as medium severity by Chromium security. The vulnerability was published on June 4, 2026, but no CVSS score or explicit remediation level is provided in the available data. The vendor advisory URL is given but does not contain patch or mitigation details in the input.

A remote attacker could leverage this vulnerability to obtain potentially sensitive information from the memory of the Chrome process. This could lead to information disclosure but does not indicate direct code execution or system compromise. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites. No vendor advisory content explicitly states that no action is required or that the issue is already mitigated.