The vulnerability is an uninitialized use in the ANGLE graphics library within Google Chrome. When a renderer process is compromised, an attacker can design a malicious HTML page that causes the renderer to read uninitialized memory, leaking sensitive cross‑origin data. The primary impact is a confidentiality breach, exposing data that should be restricted to the original origin. The weakness is classified as CWE‑457 and also maps to CWE‑824.

Google Chrome browsers running any version older than 148.0.7778.216 are affected. The vulnerability is present in the ANGLE component used across all standard Chrome builds.

The EPSS score is less than 1%, suggesting a low likelihood of exploitation. The CVSS score of 3.1 is rated as low severity. Because it requires a compromised renderer process and an actively crafted HTML page, the attack vector is likely limited to attackers who can compromise the renderer or otherwise trick the victim's browser. The absence of a CISA KEV listing indicates no confirmed exploits yet, but the capability for cross‑origin data leakage warrants prompt remediation.