A side‑channel memory leakage in the CSS processing engine of Google Chrome allows a remote attacker to read potentially sensitive data from the browser’s process memory when rendering a specially crafted HTML page. The vulnerability is a memory disclosure via side‑channel (CWE‑1300) and is listed by Chromium with a Medium severity rating. The attacker could retrieve confidential information stored in the process’s memory space through this flaw.

All instances of Google Chrome running a version older than 150.0.7871.47 are vulnerable. The release notes for the stable channel identify this threshold. No specific operating‑system or environment restrictions are noted, so any host that runs a previously supported Chrome build is potentially in scope.

The EPSS score for this vulnerability is < 1%, indicating a very low but non‑zero exploitation probability. The CVSS score is 5.3, giving it a Medium severity rating by the Common Vulnerability Scoring System. The flaw is not listed in the CISA KEV catalog, so no known active exploitation is reported at present. Nevertheless, a remote attacker able to deliver a crafted HTML page could read sensitive data from the browser’s process memory via this side‑channel, creating a risk of confidential information disclosure.