This vulnerability involves an inappropriate implementation in the password handling component of Google Chrome before version 151.0.7922.72. An attacker can exploit this by tricking a user into performing certain UI gestures on a maliciously crafted HTML page, resulting in leakage of cross-origin data. The issue was publicly disclosed with a high severity rating by Chromium security. The vendor advisory linked indicates a stable channel update addressing this issue, implying a fix is available in version 151.0.7922.72.

Successful exploitation can lead to unauthorized disclosure of cross-origin data, potentially exposing sensitive user information stored or accessible via Chrome's password management. This compromises user privacy and security by leaking data across origin boundaries.

Users should update Google Chrome to version 151.0.7922.72 or later, where this vulnerability is fixed. The vendor advisory confirms the availability of an official fix in this version. No additional mitigation steps are indicated by the vendor advisory.