This vulnerability involves an inappropriate implementation in the Autofill component of Google Chrome before version 149.0.7827.197. An attacker who has already compromised the renderer process can exploit this flaw to leak data from other origins through a specially crafted HTML page. The issue is categorized under CWE-346 (Origin Validation Error). The CVSS vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and low confidentiality impact. No official fix or patch status is confirmed in the provided information.

The impact is limited to potential leakage of cross-origin data if the attacker has already compromised the renderer process. The confidentiality impact is low, with no integrity or availability impact. The vulnerability requires user interaction and has high attack complexity, reducing the likelihood of exploitation. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is stated, users should monitor the provided Google Chrome release blog for updates. Until a patch is confirmed, limiting exposure by avoiding untrusted content and minimizing renderer process compromises may reduce risk.