EUVD-2026-40658
Use of Uninitialized Variable (CWE-457)
GHSA-4fm8-wg27-q6xr
5.3
CVSS 3.1 · Vendor: google
Share
Severity by source
Vendor (google)
PRIMARY
5.3
MEDIUM
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
vuln.today
AI
5.3
MEDIUM
AC:H reflects mandatory renderer pre-compromise; C:H for arbitrary process memory read; no integrity or availability impact applies.
3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
4.0 AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Primary rating from Vendor (google).
CVSS VectorVendor: google
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Lifecycle Timeline
4
Analysis Generated
Jul 01, 2026 - 02:32 vuln.today
CVSS changed
Jul 01, 2026 - 02:22 NVD
5.3 (MEDIUM)
CVE Published
Jun 30, 2026 - 23:17 cve.org
MEDIUM 5.3
CVE Published
Jun 30, 2026 - 23:17 cve.org
UNKNOWN (no severity yet)
DescriptionCVE.org
Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
AnalysisAI
Uninitialized memory exposure in Google Chrome's Media component allows a remote attacker who has already compromised the renderer process to read potentially sensitive data from process memory by serving a crafted HTML page. Affected versions are all Chrome releases prior to 150.0.7871.47, across desktop platforms. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Access
Lure victim to attacker-controlled page
Delivery
Exploit separate renderer vulnerability
Exploit
Achieve renderer process code execution
Execution
Serve crafted media element
Persist
Trigger uninitialized buffer read in Media component
Impact
Exfiltrate leaked process memory
Access
Lure victim to attacker-controlled page
Delivery
Exploit separate renderer vulnerability
Exploit
Achieve renderer process code execution
Execution
Serve crafted media element
Persist
Trigger uninitialized buffer read in Media component
Impact
Exfiltrate leaked process memory
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two sequential conditions: first, the attacker must have already compromised the Chrome renderer process via a separate, unrelated vulnerability (this is explicitly stated in the description as a prerequisite - 'remote attacker who had compromised the renderer process'). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD CVSS 3.1 score of 5.3 (Medium) is consistent with the attack profile: AV:N captures delivery via network-hosted HTML, AC:H reflects the substantial prerequisite of a pre-compromised renderer, UI:R requires the victim to visit the attacker-controlled page, and C:H acknowledges that arbitrary process memory disclosure is a serious confidentiality breach. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has already leveraged a separate Chrome renderer exploit to achieve code execution within the renderer sandbox serves a crafted HTML page containing a malicious media element that triggers the uninitialized buffer read in the Media subsystem. The uninitialized memory contents - which may include heap data from prior allocations such as credentials, tokens, or other sensitive in-process data - are exfiltrated back to the attacker. … |
| Remediation | Upgrade to Google Chrome version 150.0.7871.47 or later, available via Chrome's built-in auto-update mechanism or directly from the Chrome releases blog at chromereleases.googleblog.com (June 2026 Stable Channel update). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-457 – Use of Uninitialized Variable
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).