This vulnerability involves side-channel information leakage in the Paint component of Google Chrome before version 150.0.7871.47. An attacker can exploit this flaw by crafting a malicious HTML page that causes leakage of cross-origin data, potentially exposing sensitive information across different web origins. The issue is classified with medium severity by Chromium security. The vendor has published an advisory indicating a stable update that presumably fixes this issue, though explicit patch status is not detailed in the provided data.

The vulnerability enables remote attackers to leak cross-origin data, which may lead to unauthorized disclosure of sensitive information between web origins. There is no indication of code execution or privilege escalation. No known exploits in the wild have been reported at this time.

A stable channel update for Google Chrome has been published that addresses this vulnerability. Users should update to version 150.0.7871.47 or later to remediate this issue. Patch status is not explicitly confirmed in the advisory, so users should verify update application via official Google Chrome release notes.