This vulnerability is an uninitialized use issue in the UI of Google Chrome on Android versions before 150.0.7871.47. An attacker who has compromised the renderer process can exploit this flaw by delivering a crafted HTML page to extract sensitive information from process memory. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact. No known exploits in the wild have been reported. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level.

The vulnerability allows a remote attacker with control over the renderer process to obtain sensitive information from process memory, impacting confidentiality. There is no impact on integrity or availability. Exploitation requires user interaction and is of high complexity, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted content and ensure Chrome is updated to the latest available version.