This vulnerability arises from insufficient policy enforcement in the Spellcheck component of Google Chrome before version 150.0.7871.47. An attacker who has already compromised the renderer process can exploit this flaw by delivering a specially crafted HTML page, enabling them to read sensitive information from the process memory. The issue is classified under CWE-20 (Improper Input Validation). The CVSS v3.1 base score is 5.3, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact but no integrity or availability impact.

An attacker with control over the renderer process can extract potentially sensitive information from Chrome's process memory via a crafted HTML page. This could lead to information disclosure but does not affect integrity or availability. The attack requires user interaction and has high attack complexity, limiting ease of exploitation.

The vulnerability affects versions prior to 150.0.7871.47. Users and administrators should update Google Chrome to version 150.0.7871.47 or later to remediate this issue. The vendor advisory linked provides the official update information. No other specific mitigations are indicated.