This vulnerability arises from an inappropriate implementation in the Preload feature of Google Chrome versions before 148.0.7778.96. It enables a remote attacker to leak data across origins via a specially crafted HTML page. The Chromium security team has assigned a Low severity rating to this issue. No CVSS score or detailed technical exploitation information is provided. The vulnerability is publicly disclosed but lacks explicit vendor confirmation of a patch or fix in the provided advisory.

The impact is limited to potential cross-origin data leakage, which could expose sensitive information from one origin to another unauthorized origin. The severity is considered Low by the Chromium security team, indicating limited risk or difficulty in exploitation. There are no known active exploits in the wild, reducing immediate threat urgency.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Since this is not a cloud service, users should monitor for official updates from Google Chrome and apply any released patches promptly. No vendor advisory states that no action is required or that the issue is already mitigated.