This vulnerability arises from insufficient policy enforcement in the network module of Google Chrome versions before 149.0.7827.103. An attacker with control over the utility process can exploit this to leak cross-origin data by delivering a specially crafted HTML page. The issue compromises the browser's same-origin policy enforcement, potentially exposing sensitive data across origins. The vulnerability is acknowledged by Chromium security as high severity. No detailed remediation or patch information is included in the provided data, and no known exploits in the wild are reported.

If exploited, this vulnerability could allow an attacker who has already compromised the utility process within Chrome to bypass cross-origin data restrictions, leading to unauthorized data disclosure. This could impact user privacy and security by exposing sensitive information from different web origins. However, exploitation requires prior compromise of the utility process, which limits the attack surface. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Since the vulnerability affects Chrome versions prior to 149.0.7827.103, updating to this version or later is recommended once confirmed by the vendor. No other specific mitigations are provided in the available data.