This vulnerability is an uninitialized use issue in the ANGLE graphics engine component of Google Chrome versions before 149.0.7827.53. An attacker can exploit this by delivering a crafted HTML page that triggers the uninitialized memory usage, potentially leaking sensitive information from the browser's process memory. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low complexity, no privileges required, but requiring user interaction. The impact is limited to confidentiality loss without affecting integrity or availability.

An attacker who successfully exploits this vulnerability can obtain sensitive information from the memory of the Chrome process. This could lead to information disclosure but does not allow modification or disruption of the browser or system. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should monitor for updates and apply the official Chrome update once available to address this vulnerability.