This vulnerability involves an inappropriate implementation in the WebRTC component of Google Chrome before version 149.0.7827.53. It enables a remote attacker to leak data across origins by exploiting the way WebRTC handles crafted HTML pages. The issue was publicly disclosed with medium severity by Chromium security. No detailed technical exploitation methods or impact scenarios are provided beyond the data leakage via cross-origin vectors.

The impact is limited to cross-origin data leakage, which could expose sensitive information from one origin to an attacker-controlled origin. This could compromise user privacy or confidentiality of web data accessible through WebRTC. There are no known exploits in the wild at the time of publication.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should monitor official Google Chrome updates and apply the latest stable version once a fix is released. No specific temporary mitigations are provided in the advisory.