This vulnerability arises from an inappropriate implementation in the Passwords feature of Google Chrome before version 149.0.7827.53. It allows a remote attacker, with prior compromise of the renderer process, to extract sensitive information from process memory by delivering a crafted HTML page. The issue is classified as medium severity by Chromium security. No CVSS score is assigned, and no direct patch or remediation level is specified in the provided data. The vendor advisory URL points to a stable channel update announcement, which may contain relevant patch information.

If exploited, an attacker who has already compromised the renderer process could gain access to sensitive information stored in process memory, potentially including passwords or other confidential data managed by Chrome's Passwords component. The impact is limited to scenarios where the renderer process is compromised, and the attacker can deliver a crafted HTML page to trigger the information leak.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official confirmation, users should update Chrome to version 149.0.7827.53 or later if available, as the vulnerability affects versions prior to this. No specific temporary mitigations are provided in the available data.