This vulnerability arises from uninitialized use in the GPU component of Google Chrome before version 148.0.7778.96. An attacker with control over the renderer process can exploit this to leak data across origins via a specially crafted HTML page. The issue is classified as medium severity by Chromium security. The vendor has released a stable update that includes a fix for this vulnerability.

The impact is limited to information disclosure, specifically leaking cross-origin data, which could violate user privacy and confidentiality. Exploitation requires prior compromise of the renderer process, so the vulnerability does not enable initial remote code execution or system compromise by itself. No known active exploitation has been reported.

A fix is available in Google Chrome version 148.0.7778.96 as indicated by the vendor's stable channel update advisory. Users and administrators should update to this version or later to remediate the vulnerability. Since this is a client-side browser vulnerability, applying the official update is the primary mitigation. No additional vendor-recommended mitigations are noted.