This vulnerability involves uninitialized use in the video handling code of Google Chrome on Windows versions before 149.0.7827.103. An attacker with control over the renderer process can exploit this flaw via a crafted HTML page to read potentially sensitive information from process memory. The issue is recognized as high severity by Chromium security. The vendor advisory is available but does not explicitly state if a patch or fix has been released.

If exploited, an attacker who has already compromised the renderer process could leverage this vulnerability to obtain sensitive information from Chrome's process memory. This could lead to further compromise or data leakage within the context of the renderer process. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Until official confirmation of a fix, users should update to the latest Chrome version when available and avoid untrusted content that could compromise the renderer process.