This vulnerability involves uninitialized use in the ANGLE graphics engine within Google Chrome versions before 149.0.7827.53. An attacker with control over the renderer process can exploit this flaw to leak data across origins via a specially crafted HTML page. The issue is recognized by Chromium security as medium severity. No CVSS score or detailed remediation information is included in the provided data, and no known exploits in the wild have been reported.

The impact is limited to information disclosure, specifically leaking cross-origin data if the attacker has already compromised the renderer process. This does not represent a remote code execution or privilege escalation by itself but can aid attackers in further exploiting compromised environments. No evidence of active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Since no explicit remediation level or patch link is provided, users and administrators should monitor official Google Chrome release notes and update to version 149.0.7827.53 or later once confirmed fixed. No additional mitigation steps are specified by the vendor advisory in the provided data.