This vulnerability involves insufficient data validation in the Autofill implementation of Google Chrome versions before 149.0.7827.53. An attacker can craft a malicious HTML page that causes cross-origin data leakage, potentially exposing sensitive information from other origins. The issue is classified as low severity by Chromium security. The vulnerability is publicly disclosed but lacks detailed technical or exploit information. The vendor advisory is available but does not explicitly state patch or mitigation details.

The impact is limited to potential leakage of cross-origin data via the Autofill feature in affected Chrome versions. This could expose user data from other origins to a remote attacker under specific conditions. The severity is considered low, indicating limited risk or difficulty in exploitation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 149.0.7827.53 or later once confirmed patched. Until then, cautious handling of untrusted web content and disabling Autofill may reduce exposure.