Uninitialized memory usage in the ANGLE component of Google Chrome enables a remote attacker to read data that may be present in the browser’s process memory after a user loads a specially crafted HTML page. Classified as CWE‑457, the flaw can expose potentially sensitive information and was judged as high severity by the Chromium security team.

The vulnerability is present in all Google Chrome builds prior to version 150.0.7871.115 on any operating system; users running those pre‑update versions are susceptible to the attack.

A remote attacker can trigger the flaw by delivering a malicious HTML document that a user opens in Chrome. The CVSS score of 6.5 classifies the vulnerability as medium severity. The EPSS score of < 1% indicates a low but non‑zero likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attacker must have a user open a crafted page; no further interaction beyond viewing the page is required.