This vulnerability is a race condition (CWE-362) in Google Chrome on iOS versions before 150.0.7871.47. It allows a local attacker with physical access to the device to extract potentially sensitive information from process memory. The CVSS score is 4.2 (medium severity) with an attack vector of physical access, high attack complexity, no privileges required, and no user interaction needed. The vulnerability affects confidentiality but not integrity or availability. There is no explicit vendor advisory stating a patch or remediation level, and no known exploits in the wild have been reported.

An attacker with physical access to an affected iOS device running Chrome before version 150.0.7871.47 could exploit this race condition to access sensitive information from the browser's process memory. This compromises confidentiality but does not impact data integrity or system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The provided vendor advisory URL does not explicitly confirm a fix or remediation level. Users should monitor official Google Chrome release notes and update to version 150.0.7871.47 or later once confirmed. Until then, limiting physical access to devices is recommended.