The vulnerability is an inappropriate implementation in the V8 engine of Google Chrome, allowing a remote attacker to read potentially sensitive data from process memory through a crafted HTML page. This flaw results in information disclosure and is typically triggered when the user visits a malicious web page constructed by the attacker. The flaw falls under CWE-200, an information exposure weakness, and the likely attack vector is a remote web page delivered via the browser.

The affected product is Google Chrome on any build prior to version 148.0.7778.96. Only these older releases contain the unpatched implementation that permits the memory disclosure.

Chromium labels the issue as low severity, with a CVSS score of 4.3, there is no EPSS data available and the vulnerability is not listed in the CISA KEV catalog. The exploit requires user interaction with a malicious web page and does not provide code execution or privilege escalation. Based on the provided metrics, the practical risk is considered low to moderate, with exploitation unlikely to be widespread.