This vulnerability in Google Chrome's Extensions component prior to version 150.0.7871.47 results from insufficient policy enforcement. An attacker who has already compromised the renderer process can exploit this weakness to leak data across origins by using a specially crafted HTML page. The issue affects desktop versions of Chrome and is classified as low severity by the Chromium security team. There is no detailed CVSS score or explicit remediation level provided in the available data. The vendor advisory URL points to a stable channel update announcement but does not explicitly confirm patch status.

A remote attacker with control over the renderer process can leak cross-origin data, potentially exposing sensitive information from other origins. The impact is limited by the prerequisite that the attacker must have already compromised the renderer process. The Chromium security team rates this vulnerability as low severity, indicating limited risk or exploitability.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update Google Chrome to version 150.0.7871.47 or later once confirmed. No other specific mitigations are provided.