This vulnerability is an uninitialized use issue in the ANGLE graphics engine component of Google Chrome versions before 149.0.7827.53. An attacker with control over the renderer process could exploit this flaw to leak cross-origin data by crafting a malicious HTML page. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation status.

Successful exploitation allows a remote attacker who has already compromised the renderer process to leak sensitive cross-origin data, impacting confidentiality. There is no impact on integrity or availability. No known exploits are reported in the wild, reducing immediate risk.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted content and consider updating Chrome once a patch is released.