An uninitialized use vulnerability exists in the WebXR implementation of Google Chrome on Android versions before 150.0.7871.47. This vulnerability can be exploited remotely via a crafted HTML page to leak potentially sensitive information from process memory. The vulnerability was publicly disclosed with medium severity, but no CVSS score or detailed exploitation information is provided. The vendor advisory linked corresponds to a stable channel update, which likely addresses this issue.

A remote attacker can leverage this vulnerability to access potentially sensitive information from the browser's process memory on affected Chrome versions on Android. This may lead to information disclosure but does not indicate code execution or further compromise based on the available data.

Check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for official patch availability and update Chrome on Android to version 150.0.7871.47 or later. Patch status is not explicitly confirmed in the provided data; therefore, verify the vendor advisory for current remediation guidance.