This vulnerability involves an inappropriate implementation in the Skia graphics library within Google Chrome before version 148.0.7778.216. An attacker with control over the renderer process can exploit this flaw to leak data across origins via a specially crafted HTML page. The issue is recognized as high severity by Chromium security. Although no explicit patch or remediation level is detailed in the input, the vendor advisory URL points to a stable channel update likely containing the fix.

A remote attacker who has compromised the renderer process can leak cross-origin data, potentially exposing sensitive information from other web origins. This compromises the same-origin policy protections normally enforced by the browser, leading to privacy and data confidentiality risks. There are no known exploits in the wild at this time.

Google has released a stable channel update for Chrome that includes version 148.0.7778.216 or later, which addresses this vulnerability. Users and administrators should update their Chrome installations to version 148.0.7778.216 or newer to remediate this issue. Patch status is not explicitly confirmed in the advisory text provided, but the linked update strongly suggests an official fix is available.