This vulnerability arises from insufficient validation of untrusted input in the Storage Access API in Google Chrome versions before 149.0.7827.53. An attacker with control over the renderer process could exploit this flaw to leak data across origins by crafting a malicious HTML page. The issue is classified as low severity by Chromium's security team. No CVSS score is assigned, and no known active exploitation has been documented. The vendor advisory linked is a stable channel update announcement but does not explicitly confirm if this vulnerability is fixed in that update.

If exploited, this vulnerability could lead to cross-origin data leakage by an attacker who has already compromised the renderer process. This could expose sensitive information from other origins within the browser context. However, the overall severity is considered low, and there are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to the latest stable version of Google Chrome when available to ensure any fixes are applied. No additional mitigation steps are specified by the vendor.