This vulnerability arises from an inappropriate implementation in the Password Manager of Google Chrome before version 149.0.7827.53. It enables a remote attacker to leak data across origins by exploiting the way the Password Manager handles crafted HTML pages. The issue is recognized by Chromium security with a medium severity rating. No detailed CVSS score or explicit remediation level is provided in the available data. The vendor advisory link points to a stable channel update announcement but does not explicitly confirm if this version includes a fix for this vulnerability.

The vulnerability allows remote attackers to leak cross-origin data, which can lead to unauthorized disclosure of sensitive information stored or managed by the Password Manager in affected Chrome versions. There are no known exploits in the wild at this time. The impact is considered medium severity by Chromium security, indicating a moderate risk of data leakage but not necessarily full system compromise.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to the latest stable version of Google Chrome once the fix is confirmed. Until then, cautious handling of untrusted web content is advised to reduce exposure to crafted HTML pages that could exploit this vulnerability.