This vulnerability in Google Chrome's WebView component on Android arises from insufficient enforcement of security policies, enabling remote attackers to bypass cross-origin restrictions and leak data by using a specially crafted HTML page. It affects versions prior to 149.0.7827.53. The issue was publicly disclosed on June 4, 2026, with a medium severity rating by Chromium security. No detailed CVSS score or explicit remediation level is provided in the available data. The vendor advisory URL points to a stable channel update announcement but does not explicitly confirm if this specific vulnerability is patched in that release.

The vulnerability allows remote attackers to bypass WebView policy enforcement, potentially leading to unauthorized disclosure of cross-origin data. This could compromise user privacy or leak sensitive information accessible within the WebView context. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor the official Google Chrome release notes and update to version 149.0.7827.53 or later once confirmed to include a fix for this issue. Until then, caution is advised when interacting with untrusted content in WebView on affected versions.