This vulnerability arises from insufficient validation of untrusted input in the DevTools component of Google Chrome before version 148.0.7778.96. An attacker with control over the renderer process can exploit this to leak data across origins via a crafted HTML page. The issue is recognized by Chromium security as medium severity. No CVSS score or explicit remediation level is provided in the data. The vendor advisory URL points to a Chrome stable channel update announcement but does not explicitly confirm a fix for this vulnerability within the provided context.

The impact is limited to information disclosure through cross-origin data leakage when the attacker has already compromised the renderer process. This could expose sensitive data from other origins accessible in the browser context. There are no known exploits in the wild according to the provided information.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Since this is not a cloud service, remediation depends on updating the affected Chrome browser version. Users should monitor official Google Chrome release notes for updates addressing this vulnerability.