This vulnerability involves uninitialized use in the media component of Google Chrome versions before 149.0.7827.53. An attacker with control over the renderer process can exploit this flaw via a crafted HTML page to read potentially sensitive information from process memory. The issue is recognized by Chromium security with a medium severity rating. The vulnerability was published on June 4, 2026. No CVSS score or remediation level is provided, and the vendor advisory does not explicitly confirm a patch or mitigation status.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to obtain sensitive information from Chrome's process memory. This could lead to information disclosure but requires prior compromise of the renderer process. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official fixes are confirmed, users should ensure they update Chrome promptly once a fix is released. No vendor advisory states that no action is required or that the issue is already mitigated.