This vulnerability is an uninitialized use issue in the ANGLE graphics layer of Google Chrome versions before 149.0.7827.53. Exploitation could lead to cross-origin data leakage when a user visits a maliciously crafted HTML page. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact. No official remediation level or patch availability is stated in the provided data, and no exploits are known in the wild at this time.

Successful exploitation could result in unauthorized disclosure of sensitive cross-origin data, impacting user privacy and confidentiality. There is no impact on integrity or availability. The vulnerability requires user interaction and can be triggered remotely over the network.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites and keep Chrome updated to the latest available version.