Chrome's printing subsystem on Windows versions prior to 155.0.8059.39 contains an out‑of‑bounds read that allows an attacker who has already compromised a renderer process to execute a crafted HTML page and read memory beyond the sandbox boundaries. This flaw permits sensitive data leakage from the renderer’s memory and constitutes a confidentiality breach. The weakness corresponds to CWE‑125, an out‑of‑bounds read. The Chromium security team has rated the issue as Medium severity.

The vulnerability affects Google Chrome for Windows, specifically any build older than 155.0.8059.39 that includes the printing component. Users running these versions should consider them vulnerable until they upgrade.

The exploitation path requires the attacker to first compromise the renderer process, which is a non‑trivial step typically achieved via social engineering or exploitation of other media. Once inside the process, the crafted HTML triggers the out‑of‑bounds read, leaking memory. The EPSS score is < 1% and the flaw is not listed in the CISA KEV catalog, suggesting limited public exploitation data at present. The CVSS score is 4.7, indicating a medium severity. Nevertheless, the medium severity rating and the need for renderer compromise indicate that this flaw presents a moderate risk that should be mitigated promptly.