Google Chrome Speech Component Race Condition Vulnerability Allowing Memory Information Disclosure

Vulnerability

A race condition vulnerability has been identified in the Speech component of Google Chrome, affecting versions prior to 148.0.7778.96. This vulnerability allows a remote attacker, who has compromised the renderer process, to access potentially sensitive information from process memory by using a specially crafted HTML page.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from the process memory of the affected Chrome instance.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.

Added: May 6, 2026, 8:13 PM
Updated: May 6, 2026, 8:13 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
3.3
remediation
7.7
relevance
7.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.