A single out-of-bounds read vulnerability in the ANGLE graphics driver of Google Chrome on macOS allows a remote attacker, if it can already compromise the renderer process, to read memory outside the intended bounds. This can expose sensitive information contained in the renderer memory and is classified as a high severity flaw.

Google Chrome on macOS. The issue exists in all releases prior to version 150.0.7871.47; newer releases include the fix.

The CVSS metrics are not publicly documented, but Chromium labels the bug as high severity. Exploitation requires an attacker to first compromise the renderer process, which typically means the attacker has obtained a high level of access via malicious web content or a side channel. Because the EPSS score is unavailable and the vulnerability is not in the CISA KEV catalog, the likelihood of widespread exploitation is currently low, yet the potential impact remains significant if the prerequisite renderer compromise occurs.