CVE-2026-12444 is an out of bounds read vulnerability in the Chromoting feature of Google Chrome on Windows platforms. It affects versions before 149.0.7827.155, enabling a local attacker to access potentially sensitive information from process memory through a crafted malicious file. The vulnerability has been publicly disclosed, but no official remediation level or patch details are explicitly stated in the provided data. The vendor advisory link is available but does not confirm patch availability or mitigation steps.

A local attacker can exploit this vulnerability to read memory outside the intended bounds, potentially exposing sensitive information from the Chrome process memory. This could lead to information disclosure but does not indicate code execution or privilege escalation based on the provided data.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html for current remediation guidance. Until official fixes are confirmed, avoid opening untrusted files with the affected Chrome versions and consider upgrading to version 149.0.7827.155 or later if available.