The vulnerability arises from incorrect authorization controls in Chrome's PrintPreview feature. In versions older than 156.0.8078.47, a crafted Chrome extension can trigger a PrintPreview of a page and gain access to data that should remain confidential, effectively allowing a remote attacker to read sensitive information. This flaw represents a serious confidentiality breach rather than code execution.

The vulnerability affects Google Chrome desktop browsers. Versions older than 156.0.8078.47 are susceptible. Based on the description it is inferred that the affected build runs on Windows, macOS, and Linux, as the PrintPreview component is common across platforms.

The CVSS score of 9.6 indicates a high severity incident. The EPSS score is < 1%, and the vulnerability is not yet listed in the CISA KEV catalog. Based on the description, the attack vector is likely remote, in which a malicious Chrome extension is installed or used to trigger a PrintPreview and extract confidential data. Given the potential to bypass normal data access controls, an exploitation could expose user data or sensitive documents if not mitigated promptly.