This vulnerability (CVE-2026-11123) is an uninitialized use issue in the ANGLE component of Google Chrome versions before 149.0.7827.53. An attacker can exploit this flaw by delivering a specially crafted HTML page, which may lead to disclosure of sensitive information from process memory. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, no privileges required, user interaction needed, unchanged scope, and high confidentiality impact without integrity or availability impact. The vulnerability is categorized under CWE-457 (Use of Uninitialized Variable). The vendor advisory linked does not explicitly state if a fix has been released, and no patch links are provided.

Successful exploitation could result in unauthorized disclosure of sensitive information from the affected Chrome process memory. There is no impact on integrity or availability. The vulnerability requires user interaction and a crafted HTML page to trigger the issue. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites and avoid interacting with suspicious content that could trigger this vulnerability.