This vulnerability arises from an inappropriate implementation in the Passwords feature of Google Chrome before version 149.0.7827.53. A remote attacker who has already compromised the renderer process can exploit this flaw by delivering a crafted HTML page, which enables them to extract sensitive information from the process memory. The issue is classified under CWE-200 (Exposure of Sensitive Information). The CVSS v3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, no privileges required, user interaction needed, and high confidentiality impact without affecting integrity or availability.

An attacker who has compromised the renderer process can obtain sensitive information from Chrome's process memory, potentially exposing user passwords or other confidential data managed by the browser. There is no reported impact on data integrity or system availability. No known exploits are reported in the wild at this time.

The vulnerability affects versions prior to 149.0.7827.53. Users and administrators should update Google Chrome to version 149.0.7827.53 or later to remediate this issue. The vendor advisory linked provides the stable channel update details. Since this is not a cloud service, remediation depends on applying the update on client systems. Patch status is not explicitly stated in the advisory, but the presence of the fixed version indicates an official fix is available.