This vulnerability arises from insufficient validation of untrusted input in the Print Preview component of Google Chrome. A crafted HTML page can trigger the renderer process to read data from other origins. The result is the leakage of cross‑origin information, potentially exposing sensitive user data. The weakness is a classic input validation flaw (CWE‑20) combined with trust in renderer processes (CWE‑346).

The flaw affects all Google Chrome releases prior to version 151.0.7922.72. No other vendors or product lines are listed. Systems running those Chrome versions in environments where attackers can load arbitrary HTML into the print preview are vulnerable.

The CVSS score of 6.5 indicates a moderate severity, and the EPSS score of less than 1% suggests a very low probability of exploitation in the wild. The vulnerability is not recorded in the CISA KEV catalog. Exploitation requires a remote attacker to have already compromised the renderer process, after which the attacker can craft a malicious page that accesses cross‑origin data. Defender vigilance is advisable but current attack vectors are limited.