This vulnerability in Google Chrome affects the Autofill component, where insufficient enforcement of security policies can lead to cross-origin data leakage. An attacker can craft a malicious HTML page that exploits this weakness to access data from other origins that should be protected. The issue is fixed in Chrome version 148.0.7778.96, indicating that earlier versions are vulnerable. The vulnerability was publicly disclosed on May 6, 2026, and is classified as Medium severity by the Chromium security team. No CVSS score is assigned, and no known active exploitation has been reported.

The impact of this vulnerability is the potential unauthorized disclosure of cross-origin data through the Autofill feature in affected versions of Google Chrome. This could lead to privacy breaches or leakage of sensitive user information. However, no active exploitation in the wild has been documented, and the severity is rated medium by the vendor.

The vulnerability is addressed in Google Chrome version 148.0.7778.96. Users and administrators should update to this version or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the update. Patch status is not explicitly confirmed in the vendor advisory, but the fixed version is identified. Check the official Google Chrome release notes for confirmation and further guidance.