This vulnerability involves uninitialized use in the media component of Google Chrome before version 150.0.7871.47. An attacker who has already compromised the renderer process can exploit this flaw by delivering a crafted HTML page, potentially leaking sensitive information from process memory. The CVSS score is 5.3 (medium), reflecting network attack vector with high confidentiality impact but requiring user interaction and high attack complexity. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level.

The vulnerability allows an attacker with control over the renderer process to obtain potentially sensitive information from process memory, impacting confidentiality. There is no impact on integrity or availability. Exploitation requires user interaction and is of high complexity. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official confirmation, users should update to version 150.0.7871.47 or later once available. No other specific mitigations are indicated.