This vulnerability in Google Chrome's Password Manager arises from insufficient policy enforcement, enabling an attacker with control over the renderer process to bypass site isolation protections via a crafted HTML page. This could lead to unauthorized access to sensitive data across site boundaries. The issue affects Chrome versions prior to 149.0.7827.53. No official remediation level or patch availability is explicitly stated in the provided data, but a vendor advisory link is given for further details.

The vulnerability allows a remote attacker who has already compromised the renderer process to bypass site isolation, potentially exposing sensitive information managed by the Password Manager. The CVSS score of 8.1 indicates a high impact on confidentiality and integrity, with no impact on availability.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted content and consider limiting exposure to renderer process compromise.