This vulnerability arises from an inappropriate implementation in the DataTransfer component of Google Chrome before version 151.0.7922.72. An attacker who convinces a user to perform certain UI gestures on a maliciously crafted HTML page can cause cross-origin data leakage. The issue is categorized under CWE-346 (Origin Validation Error). The CVSS v3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, and limited confidentiality impact.

Successful exploitation can lead to leakage of cross-origin data, potentially exposing sensitive information from other origins accessible in the browser context. There is no impact on integrity or availability. The vulnerability requires user interaction and does not require privileges, limiting the scope of exploitation.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked confirms the availability of this update. No additional mitigation steps are indicated.