This vulnerability involves side-channel information leakage in the Autofill component of Google Chrome before version 151.0.7922.72. An attacker with control over the renderer process can exploit this flaw to leak data from other origins through a specially crafted HTML page. The issue was assigned CVE-2026-17851 and is classified with medium severity by Chromium security. The vendor advisory URL references a stable channel update but does not explicitly confirm patch availability or remediation details.

A remote attacker who has already compromised the renderer process can leverage this vulnerability to leak cross-origin data, potentially exposing sensitive user information autofilled by the browser. The impact is limited to information disclosure and requires prior compromise of the renderer process.

Patch status is not explicitly confirmed in the vendor advisory; therefore, check the referenced Google Chrome stable channel update for confirmation of remediation. Users should update to version 151.0.7922.72 or later once available. No other mitigation guidance is provided by the vendor.