This vulnerability arises from an inappropriate implementation in the Media component of Google Chrome on Windows versions before 148.0.7778.216. It permits a remote attacker, with control over the renderer process, to leak data across origins by using a specially crafted HTML page. The issue was publicly disclosed with a high severity rating by Chromium. Although the affected version is identified, the vendor advisory linked does not explicitly confirm whether a patch has been released or if an official fix is available.

The impact of this vulnerability is the potential leakage of cross-origin data by a remote attacker who has compromised the renderer process. This could lead to unauthorized disclosure of sensitive information accessible within the browser context. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Until confirmation of a fix, users should consider updating to the latest Chrome version when available and avoid untrusted content that could compromise the renderer process.