This vulnerability in Google Chrome versions before 148.0.7778.179 arises from insufficient validation of untrusted input within the browser's renderer process. An attacker with control over the renderer process can exploit this to leak data across origins by crafting a malicious HTML page. The vulnerability is recognized by Chromium security as medium severity. No official remediation level or patch status is explicitly stated in the provided data, though the vendor advisory URL is available for further details.

The impact is limited to information leakage of cross-origin data by an attacker who has already compromised the renderer process. This could expose sensitive data from other origins within the browser context. There are no known exploits in the wild at this time. The vulnerability does not allow initial compromise but escalates data exposure post-compromise.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html for current remediation guidance. Until official confirmation, users should update to the latest Chrome version once available to address this issue.