This vulnerability involves a race condition (CWE-362) in the WebCodecs API of Google Chrome before version 147.0.7727.55. Exploiting this flaw could enable a remote attacker to read sensitive information from the browser's process memory by delivering a specially crafted HTML page. The issue is classified as high severity with a CVSS 3.1 score of 7.5, reflecting network attack vector, high impact on confidentiality, integrity, and availability, and requiring user interaction with high attack complexity.

Successful exploitation can lead to disclosure of sensitive information from Chrome's process memory, potentially compromising user data confidentiality. The integrity and availability of the browser could also be affected due to the nature of the vulnerability. No active exploits have been reported in the wild so far.

Google has released a stable channel update that fixes this vulnerability in Chrome version 147.0.7727.55. Users and administrators should update their Chrome browsers to this version or later to remediate the issue. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated.