The vulnerability is a memory leak exposed by DevTools in Google Chrome versions prior to 149.0.7827.53. A remote attacker, after having already compromised the renderer process, can craft a malicious HTML page that causes the renderer to read arbitrary memory addresses. The read data could contain sensitive information such as cookies, tokens, or local credentials, thereby enabling eavesdropping or other information‑exfiltration attacks. The severity has been classified as low by Chromium, reflecting the requirement of a prior renderer compromise and the limited scope of the exposed data.

Google Chrome browsers running versions earlier than 149.0.7827.53 are affected. The issue specifically resides in the DevTools component of the renderer process. No other vendors or products are listed as impacted.

Although the EPSS score is unavailable and the vulnerability is not cataloged in CISA KEV, the exploitation path requires an attacker to first compromise the renderer process and then serve a crafted HTML page that interacts with DevTools. The low severity rating suggests a narrow window of exploitation, but any compromise of the renderer can lead to unauthorized memory reads. The risk is moderate for systems where Chrome is exposed to untrusted web content and where renderer process isolation is not fully enforced.