An out of bounds read vulnerability exists in the WebGPU implementation of Google Chrome before version 149.0.7827.53. This vulnerability enables a remote attacker to trigger an out of bounds memory read through a specially crafted HTML page. The issue was publicly disclosed on June 4, 2026. The Chromium security team rates this vulnerability as medium severity. No CVSS score or detailed remediation information is provided in the available data. The vendor advisory linked is a general stable channel update announcement without explicit mention of this vulnerability's patch status.

Successful exploitation of this vulnerability could allow a remote attacker to read memory outside the intended bounds in the WebGPU component of affected Chrome versions. This could potentially lead to information disclosure. There are no known exploits in the wild as of the publication date. The medium severity rating suggests a moderate impact but does not indicate direct code execution or system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome to version 149.0.7827.53 or later once the vendor confirms the fix. Until then, avoid visiting untrusted or suspicious websites that could host crafted HTML content exploiting this vulnerability.