This vulnerability in Google Chrome's Passwords feature prior to version 151.0.7922.72 enables a remote attacker to leak cross-origin data. The attack requires user interaction through specific UI gestures on a maliciously crafted HTML page. The issue stems from an inappropriate implementation in the password management functionality. The vulnerability is classified with medium severity by Chromium security. No CVSS score is provided, and no explicit patch or remediation status is indicated in the available information. The vendor advisory link is provided but does not specify patch details in the input data.

An attacker who convinces a user to perform certain UI gestures on a crafted HTML page can leak data from other origins, potentially exposing sensitive information across domains. This cross-origin data leak can compromise user privacy and security. However, exploitation requires user interaction, and no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official confirmation, users should update Chrome to the latest available version when possible to ensure protection against this vulnerability.