CVE-2026-12450 is a vulnerability in the Media implementation of Google Chrome before version 149.0.7827.155. It allows a remote attacker to extract potentially sensitive information from process memory by delivering a specially crafted HTML page. The vulnerability is recognized by Chromium with a high security severity classification, though the CVSS score rates it as medium severity. The vulnerability does not require privileges and can be triggered with user interaction. No official fix or remediation details are provided in the input, but a vendor advisory URL is available for further information.

An attacker can remotely obtain sensitive information from the memory of the Chrome process by convincing a user to visit a maliciously crafted HTML page. This could lead to information disclosure without requiring prior privileges. There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites and consider updating Chrome to the latest available version once updates are released.