This vulnerability in Google Chrome's Media component prior to version 149.0.7827.53 allows remote attackers to leak cross-origin data via a crafted HTML page. The issue stems from an inappropriate implementation that bypasses expected cross-origin data protections. The vulnerability is classified as medium severity by Chromium security. No CVSS score or detailed technical exploitation methods are provided. The vendor advisory linked does not explicitly confirm patch availability or remediation status.

The vulnerability enables remote attackers to leak data across origins, potentially exposing sensitive information from other web domains. This cross-origin data leak could undermine the confidentiality guarantees of web applications accessed via the affected Chrome versions. There are no known exploits in the wild at this time. The impact is limited to data leakage without further details on escalation or code execution.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 149.0.7827.53 or later once the update is confirmed to address this issue. Until then, cautious browsing and avoiding untrusted HTML content may reduce exposure.