A side‑channel information leakage was found in the Skia graphics library used by Google Chrome. A crafted HTML page can cause a remote attacker to read sensitive data from the process memory of the browser, potentially exposing confidential information. The vulnerability is an information‑exposure flaw involving memory disclosure, as identified by CWE‑1300 and CWE‑205.

Google Chrome users running any edition of the browser before version 151.0.7922.72 are affected. The issue exists in all platform releases that include the Skia component prior to that build.

The CVSS score of 5.3 classifies the flaw as low severity, and the EPSS score of less than 1% indicates a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. An attacker can trigger the side‑channel by hosting a malicious web page that is opened in the victim's browser, which is the likely attack vector given the description. Because the exploit requires access to a crafted page, the threat is primarily constrained to users who visit untrusted content.