This vulnerability in Google Chrome's password handling prior to version 149.0.7827.103 enables a remote attacker to leak data across origins by leveraging a crafted HTML page. The issue stems from an inappropriate implementation in the password component, potentially exposing sensitive cross-origin information. The Chromium security team rates this vulnerability as high severity. No CVSS score or explicit remediation details are included in the provided information.

The vulnerability allows remote attackers to bypass same-origin data protections, leading to leakage of cross-origin data. This could compromise user credentials or other sensitive information managed by Chrome's password system. However, no known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is confirmed available.