This vulnerability is an out of bounds memory read in the WebGL implementation of Google Chrome before version 151.0.7922.72. An attacker can exploit this by delivering a crafted HTML page that triggers the out of bounds read, potentially leaking sensitive memory contents. The CVSS 3.1 base score is 4.3 (medium severity) with network attack vector, low attack complexity, no privileges required, user interaction required, and limited confidentiality impact. There is no impact on integrity or availability. The vulnerability was publicly disclosed with a vendor advisory link to the Chrome stable channel update that includes the fix.

A remote attacker can cause an out of bounds read in the WebGL component of affected Chrome versions, potentially leaking sensitive information from memory. The impact is limited to confidentiality with no effect on integrity or availability. No known exploits in the wild have been reported.

Users and administrators should update Google Chrome to version 151.0.7922.72 or later, where this vulnerability is fixed. The vendor advisory confirms the availability of this official fix. No additional mitigations are required once the update is applied.