This vulnerability involves a use-after-free error in the Codecs module of Google Chrome before version 149.0.7827.53. Exploitation requires a remote attacker to deliver a specially crafted HTML page that triggers the flaw, potentially exposing sensitive information from the browser's process memory. The issue is classified with medium severity by Chromium's security team. Although no CVSS score is provided, the vulnerability is mitigated by updating to the fixed Chrome version. No evidence of active exploitation has been reported.

Successful exploitation could lead to disclosure of sensitive information from Chrome's process memory. This could compromise user data confidentiality but does not indicate code execution or system compromise. The impact is limited to information leakage within the browser context.

Users should update Google Chrome to version 149.0.7827.53 or later, where this vulnerability is fixed. Since this is a client-side application vulnerability, applying the official update is the primary and recommended mitigation. Patch status is confirmed by the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html.