The vulnerability arises from the Related‑Website‑Set policy in Google Chrome, which lets a crafted HTML page read data from a different origin. The weakness corresponding to CWE-693 indicates improper restriction of operations by policy. Although the flaw does not provide codeoses confidential data.

The defect affects Google Chrome browsers that are earlier than version 150.0.7871.47. Internet users running these older builds releases deployed after that milestone implement proper policy checks and eliminate the vulnerability. Any instance without patching remains at risk.

Based on the description, the likely exploitation path involves a remote attacker delivering a crafted page that encourages a user to visit via social engineering or compromised content. The EPSS score indicates a very low exploitation probability (< 1%), but the CVSS score of 6.5 signals medium severity. The vulnerability is not listed in the KEV marks the issue as low severity, the potential for cross‑origin data leakage makes it a confidentiality risk that should be remediated promptly.