This vulnerability in Google Chrome's Headless mode prior to version 151.0.7922.72 allows a remote attacker to bypass the same origin policy by crafting a malicious HTML page. The same origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. Bypassing this policy can lead to unauthorized access to sensitive information. The CVSS v3.1 base score is 6.5, indicating a medium severity level. There is no indication of known exploits in the wild at this time.

The impact of this vulnerability is the potential for a remote attacker to bypass the same origin policy in Google Chrome's Headless mode, which could lead to unauthorized information disclosure or interaction between otherwise isolated web origins. There is no indication of impact on confidentiality, integrity, or availability beyond the information disclosure risk. No known active exploitation has been reported.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked provides official confirmation of the update. No additional mitigation steps are indicated.