This vulnerability in Google Chrome's Cast feature involves insufficient validation of untrusted input, enabling a remote attacker to bypass the same origin policy through a crafted HTML page. It affects Chrome versions prior to 149.0.7827.53. The same origin policy bypass can potentially allow unauthorized access to web content from different origins, which is a security risk. The vulnerability is categorized as medium severity by Chromium security. No CVSS score or explicit remediation level is provided in the data. The vendor advisory is referenced but does not confirm patch availability in the provided content.

The impact of this vulnerability is a bypass of the same origin policy, which can lead to unauthorized access to web content across origins. This could potentially allow attackers to access or manipulate data that should be restricted by origin boundaries. However, no known exploits in the wild have been reported. The medium severity rating indicates a moderate risk level.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should update to the latest Chrome version once available. No other specific mitigation steps are provided in the vendor advisory content.