This vulnerability concerns an inappropriate implementation in the SVG handling of Google Chrome versions before 149.0.7827.53. It enables a remote attacker to leak cross-origin data through a specially crafted HTML page. The issue is categorized as medium severity by Chromium security. No CVSS score or detailed technical exploitation methods are provided. The vendor advisory is referenced but does not explicitly confirm patch availability or remediation details in the provided input.

The impact is a medium severity cross-origin data leak, which could allow an attacker to access data from other origins that should be protected by the browser's same-origin policy. This could lead to unauthorized disclosure of sensitive information across web domains. There is no indication of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 149.0.7827.53 or later if the update includes a fix. Until confirmation, cautious handling of untrusted web content is advised.