This vulnerability in Google Chrome's CSS implementation prior to version 150.0.7871.47 enables a remote attacker to leak cross-origin data by crafting a malicious HTML page. The issue is classified under CWE-200 (Information Exposure). The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, no privileges required, but requiring user interaction. The impact is high confidentiality loss without integrity or availability impact. There is no explicit vendor advisory stating a patch or remediation level, but the affected versions are prior to 150.0.7871.47, indicating that this version includes the fix.

The vulnerability allows unauthorized disclosure of cross-origin data, compromising user privacy and confidentiality. There is no reported impact on data integrity or system availability. No known exploits are currently in the wild.

Google Chrome version 150.0.7871.47 includes the fix for this vulnerability. Users and administrators should update to this version or later to remediate the issue. Patch status is not explicitly confirmed in the advisory, but the affected version listing indicates the fix is in 150.0.7871.47. No additional mitigation steps are specified by the vendor.