The vulnerability is an observable discrepancy in Google Chrome’s form handling before version 157.0.8103.38. A malicious page can trigger the bug, enabling a remote attacker to read sensitive data that a user enters into a form. The flaw is a form‑data exposure issue, which is classified under CWE‑203: Information Exposure Through Inadequate Encryption or Protection.

Google Chrome browsers older than 157.0.8103.38 on the stable channel are affected. Any earlier stable desktop build of Chrome is at risk; no other Chrome versions or products are listed as impacted.

Chromium rates the issue as low severity and no EPSS or KEV data is available, suggesting limited evidence of exploitation. However, because the flaw is accessed through a crafted HTML page served by an attacker, the attack vector is likely a remote web request or phishing attempt. The potential impact is the disclosure of sensitive form content such as passwords or personal details, which could be used for credential theft. The low severity rating indicates a modest exploitation risk, but it remains a valid concern for high‑profile targets.