This vulnerability involves an out-of-bounds read in the ANGLE graphics abstraction layer within Google Chrome before version 149.0.7827.53. Exploitation requires prior compromise of the renderer process, after which an attacker can use a specially crafted HTML page to access sensitive memory contents. The issue was publicly disclosed on June 4, 2026, with a medium severity rating by Chromium security. No CVSS score or explicit remediation level is provided in the available data. The vendor advisory references a stable channel update but does not explicitly confirm if this update fully addresses the vulnerability.

An attacker who has already compromised the Chrome renderer process can exploit this vulnerability to read sensitive information from process memory. This could lead to information disclosure within the context of the compromised renderer. There are no known exploits in the wild at this time. The impact is limited to information disclosure and requires prior renderer compromise, reducing the overall risk.

The vendor advisory references a stable channel update for Chrome, which likely includes a fix for this vulnerability. However, explicit confirmation of a patch or remediation level is not provided. Users should update Google Chrome to version 149.0.7827.53 or later to ensure protection. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance.