This vulnerability involves uninitialized use in the ANGLE graphics component of Google Chrome versions before 149.0.7827.53. An attacker can exploit this by crafting a malicious HTML page that triggers the flaw, potentially leaking sensitive information from the browser's process memory. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, no privileges required, user interaction needed, unchanged scope, and high confidentiality impact without integrity or availability impact. The issue was publicly disclosed with a vendor advisory link to a Chrome stable channel update blog post, but explicit patch or remediation details are not stated in the provided data.

Successful exploitation could lead to disclosure of sensitive information from Chrome's process memory, compromising user privacy. There is no impact on data integrity or system availability. The vulnerability requires user interaction and a crafted HTML page to trigger the information leak.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should apply updates to Chrome promptly once the fix is confirmed available.