Insufficient policy 150.0.7871.47 can allow an attacker with a privileged network position to leak cross‑origin data via malicious network traffic. The vulnerability, classified as CWE‑693, results in a privacy breach where data that should remain protected can be transmitted to an unintended origin.

Google Chrome, versions prior to 150.0.7871.47.

The low CVSS score of 4.3 reflects a limited impact, and the EPSS score of less than 1% indicates a very low likelihood of exploitation. The vulnerability is not included in CISA's KEV catalog. Based on the description, it is inferred that the attack vector requires an attacker who can manipulate or inject malicious traffic at the network level, such as a compromised router or firewall. No local privilege escalation or remote code execution is necessary; the exploit relies on influencing traffic that the browser receives.