This vulnerability involves uninitialized use in the Dawn component of Google Chrome before version 151.0.7922.72. An attacker who has already compromised the renderer process could exploit this flaw to read potentially sensitive information from process memory by delivering a crafted HTML page. The issue is rated medium severity with a CVSS 3.1 base score of 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, and no integrity or availability impact. The vulnerability was publicly disclosed on July 30, 2026, and fixed in Chrome version 151.0.7922.72.

An attacker who has compromised the renderer process in affected versions of Chrome could obtain sensitive information from process memory. This could lead to information disclosure but does not affect integrity or availability. The vulnerability requires user interaction and network access but no privileges or elevated permissions.

Users and administrators should update Google Chrome to version 151.0.7922.72 or later, where this vulnerability is fixed. The vendor advisory confirms the availability of this update. No additional mitigations are specified or required.