This vulnerability involves an out of bounds read in the ANGLE graphics abstraction layer within Google Chrome on Windows platforms before version 149.0.7827.53. Exploitation requires prior compromise of the renderer process, after which an attacker can use a specially crafted HTML page to access sensitive memory contents. The issue is recognized by Chromium security with a medium severity rating. No CVSS score is assigned, and no direct patch or remediation level is stated in the provided data. The vendor advisory link points to a Chrome stable channel update that likely addresses this issue.

An attacker who has already compromised the renderer process in affected Chrome versions can exploit this vulnerability to read sensitive information from process memory. This could lead to information disclosure but requires prior renderer compromise, limiting the scope of impact. There are no known exploits in the wild as of the published date.

A fix is implied by the vendor advisory referencing the Chrome stable channel update to version 149.0.7827.53. Users should update to this version or later to remediate the vulnerability. Patch status is not explicitly confirmed in the provided data; therefore, users should consult the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance.