This vulnerability involves an inappropriate implementation in the ANGLE graphics abstraction layer within Google Chrome on Windows. Prior to version 148.0.7778.168, an attacker with control over the renderer process can exploit this flaw to leak data across origins by using a specially crafted HTML page. This compromises the same-origin policy, potentially exposing sensitive information from other web origins. The issue is specific to Chrome on Windows and was publicly disclosed with a high severity rating by the Chromium security team. The vendor has released an update to fix this vulnerability.

If exploited, this vulnerability could allow an attacker who has already compromised the renderer process to bypass same-origin data restrictions and leak sensitive information from other origins. This could lead to unauthorized disclosure of user data or session information. However, exploitation requires prior compromise of the renderer process, limiting the initial attack vector. No evidence of active exploitation in the wild has been reported.

A fixed version of Google Chrome (148.0.7778.168 or later) is available that addresses this vulnerability. Users and administrators should update affected Chrome installations on Windows to this version or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the vendor's update. Patch status is confirmed by the vendor advisory linked in the input data.