An out‑of‑bounds read in WebGL allows an attacker to read memory that should be inaccessible by rendering a specially crafted HTML page. The vulnerability is a Data Exposure flaw (CWE‑125) with a Medium severity, meaning the attacker could potentially obtain sensitive data present in the victim’s process memory, but it does not directly grant code execution or privilege escalation.

Google Chrome browsers prior to version 151.0.7922.72 are affected. The vulnerability exists in the WebGL implementation of Chrome on desktop platforms. Users running any earlier stable or legacy releases are potentially exposed.

The CVSS score of 4.3 signals a moderate risk. The EPSS score of less than 1 percent indicates a very low probability that this flaw is being actively exploited in the wild, and it is not listed in the CISA KEV catalog. Exploitation would occur over the network from a remote attacker who can load a malicious web page; no special privileges or additional user interaction beyond browsing the page are required.