Technical impact
Uninitialized Use in ANGLE, a graphics component of Google Chrome, allows the browser to read memory that has not been properly initialized. This flaw can expose sensitive data that belongs to other origins, effectively violating the same‑origin policy. The weaknesses correspond to CWE‑457 and CWE‑824. The problem can be triggered when a crafted web page is loaded into the affected browser, potentially allowing an attacker to retrieve confidential data.
Affected Systems
The CVE identifies Google Chrome prior to version 149.0.7827.53 as the affected product. The notice does not differentiate among operating systems, so all builds of Chrome before that release are considered vulnerable unless the user has upgraded to a patched version.
Risk and Exploitability
The CVSS score of 6.5 indicates medium severity. EPSS information (< 1%) and the fact that the vulnerability is not included in the CISA KEV catalog suggest low exploitation likelihood at present. The likely attack vector is a crafted HTML page, inferred from the description of a remote attacker triggering the flaw, although no public exploits have been reported. Organizations should monitor for new proof‑of‑concepts but consider the risk moderate and prioritize patching.
Debian DSA