This vulnerability in Google Chrome's Media component prior to version 148.0.7778.96 enables remote attackers to leak cross-origin data via a specially crafted HTML page. The issue arises from an inappropriate implementation that breaks the same-origin policy protections. The vulnerability is classified as medium severity by Chromium security. No explicit CVSS score or detailed remediation information is provided in the available data. The vendor advisory linked is a stable channel update announcement without direct confirmation of a fix for this specific vulnerability.

The impact of this vulnerability is the potential leakage of cross-origin data, which could lead to unauthorized disclosure of sensitive information from other origins within the browser context. There is no indication of known exploits in the wild. The medium severity rating suggests a moderate risk level, primarily concerning data confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome stable channel update announcement does not explicitly confirm a fix for this vulnerability. Users and administrators should monitor the official Google Chrome release notes and update to the latest browser version once a fix is confirmed.