This vulnerability arises from insufficient enforcement of network policies in Google Chrome on Android before version 148.0.7778.168. An attacker with control over the renderer process can exploit this weakness to leak data across origins via crafted HTML content. The issue is recognized by Chromium security with a medium severity rating. No CVSS score or detailed remediation status is provided in the input data. The vendor advisory URL references a stable channel update but does not explicitly confirm a fix for this vulnerability.

If exploited, an attacker who has compromised the renderer process could leak sensitive cross-origin data, potentially exposing information that should be isolated by browser security policies. The impact is limited to scenarios where the renderer process is already compromised, and the vulnerability facilitates data leakage rather than direct code execution or system compromise.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for current remediation guidance. Users should update Google Chrome on Android to version 148.0.7778.168 or later once confirmed. Until then, no specific mitigation steps are detailed in the advisory.