This vulnerability in Google Chrome's Keyboard implementation prior to version 149.0.7827.53 enables a remote attacker to perform unauthorized script or HTML injection (UXSS) through a crafted HTML page. The issue arises from an inappropriate implementation that fails to properly handle input or content, leading to cross-site scripting risks. The Chromium security team rates this vulnerability as medium severity. No CVSS score or detailed remediation information is provided in the input data. The vendor advisory URL points to a stable channel update announcement, which may imply a fix but does not explicitly confirm it.

Successful exploitation could allow a remote attacker to inject arbitrary scripts or HTML into the context of the affected browser, potentially leading to unauthorized actions or information disclosure within the user's browsing session. The severity is medium as per Chromium security, indicating a moderate risk level. There are no known exploits in the wild according to the provided data.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to the latest stable version of Google Chrome when available to ensure any fixes are applied. No explicit vendor statement indicates that no action is required or that the issue is already mitigated.