This vulnerability in Google Chrome for Mac arises from an inappropriate implementation in the Views component, which can be exploited by a local attacker to obtain sensitive information from process memory by delivering a specially crafted HTML page. The issue affects versions prior to 151.0.7922.72. The CVSS v3.1 score is 6.2, reflecting a medium severity with a local attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact. There is no indication of active exploitation in the wild. The vendor advisory linked does not explicitly state patch availability or remediation status.

An attacker with local access to a vulnerable Mac system running Google Chrome prior to 151.0.7922.72 could exploit this vulnerability to read sensitive information from process memory, potentially leading to information disclosure. The vulnerability does not impact integrity or availability of the system or browser.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until a patch is confirmed, limit local access to trusted users and monitor for updates from Google regarding this issue.