Uninitialized memory usage within the ANGLE graphics layer of Google Chrome allows a malicious webpage to read data from a different origin. This flaw can cause sensitive information to be exposed to a remote attacker through crafted HTML content. The weakness is classified as CWE‑457 and is regarded as a high‑severity vulnerability by Chromium security.

Google Chrome browsers prior to version 151.0.7922.72 on all desktop platforms are affected. The issue arises in the ANGLE component used for rendering to graphics APIs.

The CVSS score of 6.5 indicates a moderate severity, while the EPSS score is less than 1 %, suggesting low but non‑zero exploitation probability. The flaw can be triggered remotely by hosting a malicious HTML page that exploits the uninitialized memory used by ANGLE. No credentials or privileged access are required—any user who opens the crafted page with a vulnerable Chrome install is at risk. The vulnerability is not listed in the CISA KEV catalog, but the potential for cross‑origin data leakage warrants prompt mitigation.