This vulnerability concerns an improper implementation of Cross-Origin Resource Sharing (CORS) in Google Chrome versions before 151.0.7922.72. An attacker with control over the renderer process can exploit this flaw to leak data from other origins, violating the same-origin policy. The vulnerability requires prior compromise of the renderer process, limiting the attack surface. The Chromium security team has rated this issue as low severity. There is no explicit remediation level or patch information provided in the source data, but a vendor advisory URL is available for further details.

A remote attacker who has compromised the renderer process can leak cross-origin data, potentially exposing sensitive information from other origins. The impact is limited by the prerequisite that the attacker must already control the renderer process. The severity is assessed as low by the vendor.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. No explicit patch or workaround is stated in the provided data.