A race condition (CWE‑362) in Chrome’s storage handling allows a remote attacker to read data stored for other web origins via a crafted HTML page. The flaw can lead to accidental disclosure of sensitive information that was previously accessed in other sites on the victim’s machine. Based on the description, it is inferred that the vulnerability does not enable code execution or denial of service. The impact is limited to information leakage across origins.

The vulnerability affects all instances of Google Chrome with a version older than 150.0.7871.47, regardless of operating system or build type. Updating to that release or newer resolves the issue.

The CVSS score of 6.5 indicates medium severity. An EPSS score of less than 1% shows a very low probability of public exploitation, and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector involves an attacker hosting a malicious HTML page that the victim visits, after which a race on the storage thread triggers data leakage. The complexity of triggering the race means successful attacks are unlikely in the wild, but organizations should still apply the patch.