An out of bounds read vulnerability exists in the Dawn component of Google Chrome versions before 151.0.7922.72. A remote attacker can exploit this by delivering a specially crafted HTML page, causing the browser to read memory outside of intended bounds. The CVSS 3.1 score is 8.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H), indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, no integrity impact, and high availability impact. The vulnerability is publicly disclosed with no known exploits in the wild. The vendor advisory linked does not explicitly confirm patch status but the affected version listing suggests the issue is fixed in 151.0.7922.72.

Successful exploitation can lead to disclosure of sensitive memory contents (high confidentiality impact) and cause denial of service (high availability impact). There is no integrity impact. The attack requires user interaction (e.g., visiting a crafted webpage) but no privileges or complex conditions. No known active exploitation has been reported.

Users and administrators should update Google Chrome to version 151.0.7922.72 or later to remediate this vulnerability. The vendor advisory does not explicitly state patch availability but the affected version information indicates this version includes the fix. No other mitigations or workarounds are specified.