EUVD-2026-40646
Use of Uninitialized Variable (CWE-457)
GHSA-w7cm-fh2f-3jph
6.5
CVSS 3.1 · Vendor: google
Share
Severity by source
Vendor (google)
PRIMARY
6.5
MEDIUM
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
vuln.today
AI
6.5
MEDIUM
AV:N and UI:R reflect webpage delivery requiring one user visit; C:H for uncontrolled process memory read; I:N and A:N as no write or crash capability exists.
3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Primary rating from Vendor (google).
CVSS VectorVendor: google
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Lifecycle Timeline
4
Analysis Generated
Jul 01, 2026 - 02:31 vuln.today
CVSS changed
Jul 01, 2026 - 02:22 NVD
6.5 (MEDIUM)
CVE Published
Jun 30, 2026 - 23:17 cve.org
MEDIUM 6.5
CVE Published
Jun 30, 2026 - 23:17 cve.org
UNKNOWN (no severity yet)
DescriptionCVE.org
Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
AnalysisAI
Uninitialized memory use in the codec subsystem of Google Chrome on Windows exposes potentially sensitive process memory contents to remote attackers via a crafted HTML page. All Chrome for Windows releases prior to 150.0.7871.47 are affected; the flaw is platform-specific and does not affect Chrome on Linux, macOS, or mobile. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Access
Attacker hosts crafted HTML page with malicious media element
Delivery
Victim clicks phishing link or is redirected in Chrome on Windows
Exploit
Chrome renderer decodes crafted media via vulnerable codec path
Execution
Uninitialized process memory is read into accessible buffer
Persist
Attacker-controlled JavaScript retrieves leaked memory contents
Impact
Sensitive data (heap addresses, tokens) exfiltrated to attacker
Access
Attacker hosts crafted HTML page with malicious media element
Delivery
Victim clicks phishing link or is redirected in Chrome on Windows
Exploit
Chrome renderer decodes crafted media via vulnerable codec path
Execution
Uninitialized process memory is read into accessible buffer
Persist
Attacker-controlled JavaScript retrieves leaked memory contents
Impact
Sensitive data (heap addresses, tokens) exfiltrated to attacker
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a victim running Google Chrome on Windows (any version prior to 150.0.7871.47) to visit an attacker-controlled or compromised web page containing crafted media content that triggers the codec processing path. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N yields a score of 6.5, reflecting a network-reachable, low-complexity attack requiring only a single user interaction with no privileges and high confidentiality impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts a malicious web page containing specially crafted media content - such as a video or audio element - designed to trigger the uninitialized code path in Chrome's codec subsystem on Windows. When a victim user visits the page (via a phishing link, malvertising redirect, or compromised site), Chrome decodes the crafted media in the renderer process, causing uninitialized heap or stack memory to be read; this data is then accessible to attacker-controlled JavaScript on the page, potentially revealing heap addresses, authentication tokens, or recently processed sensitive values from within the Chrome process. … |
| Remediation | Update Google Chrome on Windows to version 150.0.7871.47 or later, which is confirmed to contain the vendor-released patch per the official advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-457 – Use of Uninitialized Variable
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).