CVE-2026-18001 describes an inappropriate implementation in the WebGL component of Google Chrome before version 151.0.7922.72. This flaw enables a remote attacker to extract potentially sensitive information from the process memory by delivering a specially crafted HTML page. The vulnerability is categorized as low severity by the Chromium security team. No public exploits are known, and no detailed technical exploitation methods are provided in the available data.

The vulnerability allows remote attackers to access potentially sensitive information from the browser's process memory, which could lead to information disclosure. The impact is considered low severity by the vendor, indicating limited risk or difficulty in exploitation. There are no known exploits in the wild at this time.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Since this is a client software vulnerability, applying the official update is the recommended mitigation. No additional vendor advisory content is provided, so patch status beyond this is not confirmed.