An uninitialized use vulnerability exists in the WebML component of Google Chrome on Mac platforms prior to version 149.0.7827.53. This vulnerability allows remote attackers to potentially access sensitive information from process memory by delivering a crafted HTML page. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, and no integrity or availability impact. The vendor has published a stable channel update addressing this issue.

Successful exploitation could lead to disclosure of sensitive information from the browser's process memory. There is no indication of integrity or availability impact. The vulnerability requires user interaction and can be triggered remotely via a crafted HTML page.

Users should update Google Chrome on Mac to version 149.0.7827.53 or later, where this vulnerability is fixed. The vendor manages remediation through stable channel updates as detailed in their advisory: https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html. No additional mitigation steps are indicated by the vendor.