The vulnerability involves an inappropriate implementation in the WebProtect feature of Google Chrome versions before 151.0.7922.72. It enables a remote attacker, who has already compromised the renderer process, to leak data across origins by using a specially crafted HTML page. This cross-origin data leak could expose sensitive information accessible within the renderer context. The vulnerability is identified as CVE-2026-17765 and is rated medium severity by Chromium security. There is no CVSS score or detailed vendor advisory available in the provided data.

An attacker with control over the renderer process can exploit this vulnerability to leak cross-origin data, potentially exposing sensitive information from other origins. This could undermine the browser's same-origin policy protections, leading to privacy and data confidentiality issues. However, exploitation requires prior compromise of the renderer process, which limits the attack vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome to version 151.0.7922.72 or later once the patch is officially released. Until then, limiting exposure to untrusted content and maintaining general browser security best practices is advisable.