This vulnerability arises from insufficient enforcement of USB-related policies in Google Chrome on Android versions before 151.0.7922.72. An attacker who has already compromised the renderer process can exploit this weakness to leak data across origins by delivering a specially crafted HTML page. The vulnerability is classified as low severity by Chromium security. The vendor advisory URL is provided but does not explicitly state remediation or patch availability in the input data.

A remote attacker with control over the renderer process can leak cross-origin data, potentially exposing sensitive information from other origins. The impact is limited by the prerequisite that the attacker must have compromised the renderer process first. The severity is low, indicating limited risk or difficulty in exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users should update to version 151.0.7922.72 or later once confirmed. No other specific mitigations are indicated in the available data.