This vulnerability involves an inappropriate implementation in the password handling component of Google Chrome before version 151.0.7922.72. It enables a remote attacker to leak data from other origins by tricking a user into performing certain UI gestures on a maliciously crafted HTML page. The issue is categorized under CWE-346 (Origin Validation Error). The CVSS vector indicates the attack requires network access, high attack complexity, no privileges, and user interaction, resulting in limited confidentiality impact without integrity or availability impact.

The impact is limited to partial confidentiality loss (cross-origin data leakage) without affecting integrity or availability. The attack requires user interaction and has high complexity, reducing the likelihood of exploitation. No known active exploits have been reported.

The vulnerability affects versions prior to 151.0.7922.72. Users and administrators should update Google Chrome to version 151.0.7922.72 or later to remediate this issue. The vendor advisory linked does not explicitly state patch availability, so users should verify the update status via the official Chrome release notes.