This vulnerability involves insufficient validation of untrusted input in the Loader component of Google Chrome before version 151.0.7922.72. An attacker who has already compromised the renderer process can exploit this flaw to leak cross-origin data by crafting a malicious HTML page. The vulnerability is classified with a CVSS 3.1 base score of 6.5 (medium severity), with an attack vector of network, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality. No known exploits in the wild have been reported. The vendor advisory URL indicates a stable channel update for desktop Chrome that likely includes the fix.

Successful exploitation allows an attacker who has compromised the renderer process to leak sensitive cross-origin data, potentially exposing confidential information from other origins. There is no impact on integrity or availability reported. The vulnerability requires user interaction and no privileges, making it moderately accessible to attackers but limited to those who have already compromised the renderer process.

Users and administrators should update Google Chrome to version 151.0.7922.72 or later, as this version includes the fix for the vulnerability. The vendor advisory linked confirms a stable channel update addressing this issue. No additional mitigation steps are indicated by the vendor advisory.