This vulnerability is an out of bounds read (CWE-125) in the ANGLE graphics abstraction layer of Google Chrome versions before 149.0.7827.53. It enables a remote attacker to trigger out of bounds memory reads by crafting a malicious HTML page, potentially leading to information disclosure and denial of service. The CVSS v3.1 base score is 8.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction needed, unchanged scope, high confidentiality impact, no integrity impact, and high availability impact. The vulnerability is publicly disclosed with a vendor advisory link but lacks explicit remediation details in the provided data.

Successful exploitation can lead to unauthorized disclosure of memory contents (confidentiality impact) and cause denial of service (availability impact) in affected Chrome versions. Integrity is not impacted. The vulnerability can be triggered remotely without privileges but requires user interaction.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should monitor this advisory for updates and apply official fixes once available.