A race condition exists in the Editing functionality of Google Chrome versions earlier than 154.0.8037.57. This flaw allows a remote attacker, by leveraging social engineering, to craft an HTML page that can trigger the vulnerable code path and expose sensitive information from the victim machine. The weakness is classified under CWE‑367, indicating a race condition that can lead to data leakage.

Google Chrome browsers running any release before 154.0.8037.57 are vulnerable. No specific operating systems or architectures are listed, so the default assumption is that every platform supported by Chrome prior to this version is affected.

The CVSS score of 5.3 places this issue in the Medium risk range. There is no EPSS score reported, indicating insufficient data to assess exploitation likelihood, and the vulnerability is not included in the CISA KEV catalog. Exploitation requires a crafted HTML page and relies on a user visiting it or being tricked into opening it, meaning the attack vector is remote but depends on user interaction. Public advisories do not report any widespread exploitation.