This vulnerability involves an inappropriate implementation in the WebView component of Google Chrome on Android, which permits a remote attacker to leak cross-origin data by using a specially crafted HTML page. The issue affects versions prior to 149.0.7827.53. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, no privileges required, user interaction needed, unchanged scope, and high confidentiality impact without integrity or availability impact. No official remediation level or patch link is explicitly stated in the provided data, but the affected version indicates that 149.0.7827.53 is the fixed version.

The vulnerability allows unauthorized disclosure of cross-origin data, compromising confidentiality. There is no impact on integrity or availability. Exploitation requires user interaction and a crafted HTML page, but no privileges or complex attack conditions are necessary. No known exploits in the wild have been reported.

A fix is available in Google Chrome for Android version 149.0.7827.53. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked should be consulted for the latest update information. Patch status is not explicitly confirmed in the advisory content provided, so checking the vendor advisory is recommended for current remediation guidance.