The vulnerability stems from insufficient policy enforcement within the network module of Google Chrome, allowing an attacker who has accessed a network log file to potentially retrieve sensitive information from that file. Because the browser does not adequately restrict the visibility or contents of network logs, confidential data could be exposed to unauthorized parties. This issue is classified under CWE‑200 and represents a clear confidentiality loss.

Affected: Google Chrome browsers on Windows, macOS, and Linux, versions earlier than 144.0.7559.59. The flaw is tied to the Network module and applies across all supported operating systems where Chrome runs.

The CVSS score of 9.8 indicates a high‑risk impact to confidentiality, while the EPSS score of less than 1% suggests that exploitation opportunities are currently low but not impossible. Because the vulnerability involves insufficient enforcement of policy around network log visibility, an attacker who can access any network log file – for instance, by gaining local user privileges, compromising a privileged extension, or otherwise obtaining the log file – can read sensitive data contained therein. The issue is not listed in CISA’s KEV catalog, yet the severity and lack of robust logging controls warrant immediate attention.