This vulnerability, identified as CVE-2026-17662, affects Google Chrome versions before 151.0.7922.72. It arises from insufficient enforcement of security policies in the Prefetch functionality, enabling a remote attacker to leak data across origins by leveraging a specially crafted HTML page. The issue is classified under CWE-346 (Insufficient Authorization). The CVSS 3.1 base score is 4.3, reflecting a medium impact primarily on confidentiality with no required privileges and user interaction needed. The vendor advisory link is provided but does not explicitly state a patch or fix status.

The vulnerability allows remote attackers to leak cross-origin data, impacting the confidentiality of user information. There is no impact on integrity or availability. No known exploits have been reported in the wild, reducing immediate risk. The medium severity rating reflects the limited scope of impact and attack complexity.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official confirmation of a fix, users should exercise caution with untrusted web content that might exploit Prefetch behavior.