The vulnerability is an uninitialized use bug in Chromium’s WebNN component. It allows a remote attacker to craft an HTML page that reads memory that has not been properly initialized, which can expose data from other origins. The flaw is associated with CWE‑457 and CWE‑824 and can result in leakage of sensitive information across site boundaries.

Google Chrome running on Windows is affected. Versions older than 151.0.7922.72 contain the flaw; users of that or earlier releases are vulnerable until the patch is applied.

The CVSS score of 4.3 classifies the issue as a medium‑severity vulnerability. The EPSS score of less than 1% indicates a low likelihood of exploitation in the wild, and it is not listed in the CISA KEV catalog. The attack requires the attacker to host a malicious web page that the victim opens in Chrome, thereby allowing cross‑origin data theft. No local privilege escalation or remote code execution is involved.