This vulnerability involves an inappropriate implementation in the DevTools component of Google Chrome before version 149.0.7827.53. An attacker with control over the renderer process can leverage a crafted HTML page to extract potentially sensitive information from process memory. The issue is classified as low severity by Chromium security. No CVSS score is assigned, and no direct remediation level or patch availability is stated in the provided data. The vendor advisory link points to a stable channel update announcement, which likely includes the fix.

If exploited, an attacker who has already compromised the renderer process could gain access to sensitive information stored in process memory. This could lead to information disclosure but requires prior compromise of the renderer process, limiting the attack scope. The Chromium security team rates this vulnerability as low severity, indicating limited impact or exploitability.

Check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for the official patch status and update Chrome to version 149.0.7827.53 or later. Since this is a desktop application, users should apply the stable channel update provided by Google to remediate this issue. Patch status is not explicitly confirmed in the input data, so verifying the vendor advisory is recommended.