The vulnerability is a memory corruption bug in the ANGLE graphics stack of Google Chrome versions earlier than 156.0.8078.47. An uninitialized resource allows an attacker who has already compromised the renderer process to read memory outside the sandbox by loading a crafted HTML page. This enables the disclosure of data that should be protected by the browser’s sandbox, presenting a high‑severity risk.

Google Chrome installations running any version earlier than 156.0.8078.47 on supported operating systems are affected. The issue appears in all released builds of the stable channel, which covers a broad range of desktop environments.

The CVSS score of 8.8 reflects a high‑severity flaw that can be triggered through a crafted web page, providing a remote memory‑disclosure vector. The EPSS score of less than 1% denotes a low probability of exploitation, and it is not listed in the CISA KEV catalog. The vulnerability remains a significant concern for users who may visit malicious or compromised sites, especially if the renderer process has already been breached.