This vulnerability in Google Chrome's network component arises from insufficient validation of untrusted input, enabling a remote attacker with renderer process compromise to leak cross-origin data through a specially crafted HTML page. The CVSS 3.1 base score is 6.5 (medium), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, and no integrity or availability impact. The affected version is prior to 150.0.7871.47. The vendor advisory link is provided but does not explicitly state remediation details.

An attacker who has already compromised the renderer process can exploit this vulnerability to leak sensitive cross-origin data, impacting confidentiality. There is no impact on integrity or availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official confirmation, users should update to version 150.0.7871.47 or later once available to address this issue.