This vulnerability in Google Chrome's network component before version 151.0.7922.72 enables a remote attacker to leak cross-origin data by leveraging a crafted HTML page. The flaw is due to an inappropriate implementation, classified under CWE-346. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, no privileges, and user interaction, resulting in limited confidentiality impact without integrity or availability effects. No official remediation level or patch link is explicitly stated in the input, but a vendor advisory URL is provided for further details.

An attacker can remotely leak cross-origin data, potentially exposing sensitive information from other origins. The impact is limited to confidentiality with no integrity or availability compromise. The vulnerability requires user interaction and network access but no privileges, making exploitation possible but with limited impact severity.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should monitor this advisory for updates and apply any official fixes once available.