This vulnerability in Google Chrome's Prefetch mechanism allows insufficient enforcement of security policies, enabling a remote attacker to leak cross-origin data by crafting a malicious HTML page. The issue affects versions prior to 151.0.7922.72. The vulnerability was publicly disclosed with high severity but lacks a CVSS score and explicit remediation details in the provided data. The vendor advisory link suggests that updates may be available, but patch status is not confirmed in the input.

The vulnerability can lead to unauthorized disclosure of cross-origin data, compromising user privacy and potentially exposing sensitive information accessible through the browser. The impact is limited to affected versions of Google Chrome prior to 151.0.7922.72. There is no indication of active exploitation in the wild at the time of this report.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and update to the latest stable version once a fix is confirmed.