This vulnerability in Google Chrome's WebView on Android arises from insufficient validation of untrusted input. An attacker with control over the renderer process can exploit this flaw to leak cross-origin data by crafting a malicious HTML page. The issue is tracked as CWE-346 (Insufficient Verification of Data Authenticity). The CVSS v3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impact limited to confidentiality.

The vulnerability allows remote attackers who have already compromised the renderer process to leak sensitive cross-origin data, potentially exposing information that should be isolated between different web origins. There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

A fixed version is available: users should update Google Chrome on Android to version 151.0.7922.72 or later. The vendor advisory linked should be consulted for official update instructions. Patch status is not explicitly stated in the advisory excerpt, but the presence of the fixed version indicates remediation is available.