The vulnerability is a race condition that permits a local attacker with physical access to the device to read potentially sensitive data from Chrome’s process memory. This race condition can result in confidential data disclosure and is classified as CWE‑362.

Google Chrome for iOS released before version 150.0.7871.47, including all stable channel builds on iOS devices, is affected. The issue is fixed in Chrome 150.0.7871.47 and later.

The CVSS score of 4.2 denotes medium severity, and no EPSS score is available. The vulnerability is not listed in CISA KEV catalogues. Attack requires physical access to the device, limiting the threat to insiders or opportunistic local attackers. Successful exploitation hinges on reproducing the race condition during normal operation, and the resulting information disclosure is confined to data held in memory at the time.