The vulnerability is an observable discrepancy in the Autofill AI feature of Google Chrome that allows an attacker who has already compromised the renderer process to obtain sensitive information. By serving a specially crafted HTML page, the attacker can trick the browser into exposing credentials or other data that the Autofill AI erroneously supplies. This results in a remote information disclosure vulnerability.

Affects Google Chrome desktop browsers with versions older than 155.0.8059.39. The flaw was addressed in the 155.0.8059.39 stable channel update and applies only to the desktop release.

Exploitation requires an initial compromise of the renderer process, which may come from other browser exploits or malicious extensions. Once the renderer is controlled, the attacker can build a malicious webpage that harvests the autofill data. The EPSS score is currently unavailable, and the vulnerability is not listed in CISA's KEV catalog. Chromium rates its severity as medium. The CVSS score is 5.3, indicating medium severity.