This vulnerability arises from insufficient validation of untrusted input in the Dawn component of Google Chrome on Windows versions prior to 149.0.7827.53. An attacker who has already compromised the renderer process can exploit this flaw to leak cross-origin data by delivering a crafted HTML page. The issue is recognized as high severity by Chromium security. The vulnerability is publicly disclosed but lacks detailed patch or remediation information in the provided data. The vendor advisory URL is available for further details.

The vulnerability enables a remote attacker with control over the renderer process to leak data across origins, potentially exposing sensitive information from other web origins. This can undermine the browser's same-origin policy protections. No known exploits in the wild have been reported, and the impact is limited to data leakage rather than code execution or system compromise.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official fixes are confirmed, users should update to the latest Chrome version once available. No specific temporary mitigations are provided in the input data.