This vulnerability involves uninitialized use in the WebNN feature of Google Chrome on Windows platforms before version 151.0.7922.72. The flaw enables a remote attacker to leak cross-origin data by leveraging a crafted HTML page, potentially violating same-origin policy protections. The CVSS v3.1 base score is 4.3 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and limited confidentiality impact. The vendor advisory link is provided but does not explicitly state if a patch is available or if mitigation steps are recommended.

An attacker can remotely cause information leakage of cross-origin data via a crafted HTML page, potentially exposing sensitive information from other origins within the browser context. There is no indication of integrity or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official confirmation, users should update to version 151.0.7922.72 or later when available. No specific workarounds or mitigations are documented.