This vulnerability involves side-channel information leakage in the navigation functionality of Google Chrome before version 147.0.7727.55. A remote attacker can exploit this by crafting an HTML page that leaks cross-origin data, violating the same-origin policy. The issue is classified under CWE-1300 and has a CVSS v3.1 base score of 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, and no integrity or availability impact. The vendor has published an advisory but has not explicitly stated the patch or remediation status within the provided data.

Successful exploitation allows a remote attacker to leak sensitive cross-origin information from the victim's browser, potentially exposing confidential data. The impact is limited to confidentiality with no effect on integrity or availability. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Until a patch is confirmed, users should exercise caution when visiting untrusted websites and avoid interacting with suspicious content that could exploit this vulnerability.