This vulnerability arises from insufficient validation of untrusted input in the Skia graphics library used by Google Chrome. An attacker who has already compromised the renderer process could exploit this flaw by crafting a malicious HTML page to extract sensitive information from the process memory. The issue affects Chrome versions before 150.0.7871.46. No CVSS score or detailed remediation information is provided in the source data. The vendor advisory link is available but does not explicitly confirm patch status in the provided data.

A remote attacker with control over the renderer process can potentially obtain sensitive information from Chrome's process memory. This could lead to information disclosure but requires prior compromise of the renderer process. The severity is medium, indicating a moderate impact on confidentiality.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. No explicit remediation level or patch availability is stated in the provided data. Users should monitor official Chrome release notes for updates addressing this vulnerability.