This vulnerability involves an inappropriate implementation in the network handling of Google Chrome versions before 149.0.7827.53. It allows a remote attacker to leak data across origins by leveraging a crafted HTML page, potentially exposing sensitive information that should be isolated by the browser's same-origin policy. The issue is classified as medium severity by Chromium security. No CVSS score or detailed technical exploit information is provided. The vendor advisory references a stable channel update but does not explicitly confirm the fix status for this vulnerability.

The impact is a medium severity cross-origin data leak, which could allow remote attackers to access data from other origins that should normally be protected by browser security policies. There are no known exploits in the wild. The vulnerability affects Chrome versions prior to 149.0.7827.53.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 149.0.7827.53 or later if the update includes a fix. Until confirmation, cautious handling of untrusted web content is advised.