This vulnerability arises from an inappropriate implementation in the WebXR component of Google Chrome before version 151.0.7922.72. It permits a remote attacker to extract potentially sensitive information from process memory by delivering a specially crafted HTML page to the victim. The flaw is categorized as medium severity by Chromium security. The vendor advisory references a stable channel update that includes this fix, but no detailed remediation level or patch availability is explicitly stated in the provided data.

An attacker can remotely obtain potentially sensitive information from the memory of the Chrome process by exploiting this vulnerability via a crafted HTML page. This could lead to information disclosure but does not indicate code execution or privilege escalation. No known active exploitation has been reported.

Users should update Google Chrome to version 151.0.7922.72 or later, where this vulnerability is fixed. Since the vendor advisory references this version as the update containing the fix, applying this update mitigates the issue. Patch status is confirmed by the presence of the fixed version in the affectedVersions field and the vendor's stable channel update announcement.