This vulnerability involves side-channel information leakage in the navigation component of Google Chrome before version 148.0.7778.168. An attacker can exploit this flaw by crafting a malicious HTML page that causes cross-origin data to be leaked, potentially exposing sensitive information from other origins. The issue was recognized and fixed by Google in the stable channel update referenced in the vendor advisory.

The impact is limited to information disclosure through side-channel leakage of cross-origin data. This could allow an attacker to obtain data from other origins that should be isolated, potentially compromising user privacy or security. There are no reports of active exploitation in the wild.

Google has released an update in Chrome version 148.0.7778.168 that addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. Since this is a client-side browser vulnerability, applying the official update is the primary mitigation. No additional vendor-recommended mitigations are indicated.