This vulnerability in Google Chrome's DevTools arises from insufficient validation of untrusted input, enabling a remote attacker to bypass the same origin policy through crafted network traffic combined with user interaction. The issue affects versions before 149.0.7827.53. The CVSS 3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. No explicit remediation level or patch link is provided in the data, but a vendor advisory URL is available for further details.

Successful exploitation could allow an attacker to bypass the same origin policy, potentially leading to unauthorized access to sensitive information, modification of data, or disruption of browser functionality. The vulnerability impacts confidentiality, integrity, and availability of affected Chrome browsers.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted content and avoid engaging in unexpected UI gestures triggered by unknown network traffic.