An out of bounds read vulnerability exists in the V8 engine component of Google Chrome prior to version 149.0.7827.53. This vulnerability enables a remote attacker to read potentially sensitive memory contents by delivering a specially crafted HTML page to the victim's browser. The issue was publicly disclosed with medium severity by the Chromium project. The vulnerability is addressed in Chrome version 149.0.7827.53. No CVSS score is assigned, and no detailed remediation level is provided in the available data. The vendor advisory URL points to a Chrome stable channel update announcement, which likely includes the fix.

Successful exploitation could allow an attacker to obtain potentially sensitive information from the memory of the Chrome process. This could lead to information disclosure but does not indicate code execution or privilege escalation. No known active exploitation has been reported.

A fix is available in Google Chrome version 149.0.7827.53. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation requires updating the affected Chrome installations. Check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for confirmation and additional details.