This vulnerability involves uninitialized use in the audio subsystem of Google Chrome versions before 149.0.7827.53. Exploitation requires prior compromise of the renderer process, after which an attacker can leverage a crafted HTML page to read potentially sensitive information from process memory. The issue was publicly disclosed on June 4, 2026, with no CVSS score assigned. The vendor advisory is available but does not explicitly state the patch or remediation status within the provided data.

If exploited, an attacker with control over the renderer process could gain access to sensitive information from Chrome's process memory. This could lead to information disclosure but requires prior compromise of the renderer process, limiting the scope of direct exploitation. There are no known exploits in the wild at the time of disclosure.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Since the vulnerability affects versions prior to 149.0.7827.53, updating to version 149.0.7827.53 or later is recommended if confirmed by the vendor advisory. No alternative mitigations are specified in the available data.