An uninitialized variable use in the ANGLE graphics component of Google Chrome allows a remote attacker to read data from process memory when a crafted HTML page is rendered. The vulnerability, classified as CWE-457 and CWE-824, can potentially expose sensitive information such as credentials or session tokens to the attacker. The impact is limited to information disclosure; there is no known path to code execution or privilege escalation. The CVSS score of 6.5 indicates moderate severity.

Google Chrome browsers before 151.0.7922.72 on all supported operating systems are affected. The issue is present in any Chromium-based Chrome build that has not yet applied the patch delivered in the 151.0.7922.72 release. No other vendors or Chrome variants are noted as affected in the available data.

The vulnerability has an EPSS score of less than 1%, meaning exploitation is considered unlikely at the time of analysis. It is not listed in the CISA KEV catalog, further indicating a low current threat level. The attack vector is inferred from the description: a remote attacker must deliver a malicious HTML page that exploits the uninitialized use to read memory. No public exploitation has been reported, and the condition requires user interaction to load the page.