This vulnerability arises from an incorrect provisioning of the SanitizerAPI in Google Chrome versions prior to 155.0.8059.39, allowing a malicious actor to retrieve sensitive information from a web page constructed by the attacker. The flaw is a data preprocessing error that can leak confidential data, and is classified with a low security severity by Chromium. The impact is a breach of confidentiality, up to the extent of data exposed through the SanitizerAPI.

All installations of Google Chrome running a build older than 155.0.8059.39 are affected, regardless of operating system, as the vulnerability resides in the browser's core sanitizer functionality.

The CVSS score is 4.3, indicating low severity. The EPSS score is not available and the vulnerability is not listed as a Known Exploited Vulnerability, indicating that public exploitation activity has not been observed. The attack vector is remote, relying on a crafted HTML page delivered over the network. Although the overall severity is low, the potential for sensitive data leakage exists for attackers who can entice users to visit malicious web content that exploits the SanitizerAPI.