This vulnerability involves an uninitialized use issue in the Dawn component of Google Chrome before version 150.0.7871.47. An attacker can potentially trigger heap corruption remotely by crafting a malicious HTML page. The CVSS 3.1 vector indicates the attack requires no privileges and user interaction but can result in high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed with a high severity rating but lacks explicit vendor confirmation of a fix in the provided advisory.

Successful exploitation could lead to heap corruption, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The impact affects confidentiality, integrity, and availability of the affected system. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until a patch is confirmed, users should exercise caution when visiting untrusted websites and consider using security features such as sandboxing and site isolation.