This vulnerability involves an out of bounds read in the ANGLE graphics abstraction layer within Google Chrome on Mac systems. Specifically, versions before 150.0.7871.47 are affected. An attacker who has already compromised the renderer process can exploit this flaw by delivering a specially crafted HTML page, causing the browser to read memory outside the intended bounds. This can lead to information disclosure and potentially further compromise. The CVSS 3.1 base score is 8.1, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, no integrity impact, and high availability impact. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level.

Successful exploitation allows a remote attacker with control over the renderer process to perform out of bounds memory reads, potentially exposing sensitive information. The vulnerability impacts confidentiality and availability, with no direct integrity impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official confirmation of a fix is available, users should exercise caution with untrusted content and ensure their Chrome browser is updated to the latest stable version.