This vulnerability in Google Chrome on Windows versions prior to 151.0.7922.72 arises from an inappropriate implementation in the Enterprise feature, which permits a remote attacker to leak cross-origin data by leveraging a malicious file. The flaw could allow unauthorized data disclosure across origins, violating the same-origin policy. The vulnerability is classified as low severity by Chromium security. There is no CVSS score assigned, and no explicit remediation level is provided in the available data. The vendor advisory link is provided but does not confirm patch availability or mitigation steps.

The impact is limited to potential leakage of cross-origin data due to improper implementation in the Enterprise feature of Google Chrome on Windows. This could allow a remote attacker to access data from different origins than intended, potentially exposing sensitive information. However, the severity is rated low, indicating limited risk or difficulty in exploitation. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official confirmation, users should consider updating to version 151.0.7922.72 or later if available, as this version is indicated in the affectedVersions field. No additional mitigation recommendations are provided by the vendor advisory.