CVE-2026-15771 is a high-severity vulnerability in Google Chrome on Windows platforms before version 150.0.7871.125. It arises from insufficient validation of untrusted input in the Media component, which allows a remote attacker with control over the renderer process to potentially extract sensitive information from process memory by delivering a crafted HTML page. The vulnerability affects Chrome versions prior to 150.0.7871.125. Although a vendor advisory URL is provided, it does not explicitly confirm the availability of a patch or remediation level in the input data.

An attacker who has already compromised the renderer process in affected Chrome versions can leverage this vulnerability to obtain potentially sensitive information from process memory. This could lead to information disclosure, which may aid further exploitation or data leakage. There is no indication of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html for current remediation guidance. Users should update to Chrome version 150.0.7871.125 or later once confirmed. Until then, no specific mitigations are provided in the advisory.