This vulnerability arises from an inappropriate implementation of CSS in Google Chrome versions prior to 149.0.7827.53. It enables a remote attacker to craft an HTML page that can inject arbitrary scripts or HTML content, leading to a Universal Cross-Site Scripting (UXSS) vulnerability. The issue was publicly disclosed and assigned a medium severity level by Chromium security. No CVSS score or detailed remediation information is provided in the available data. The vendor advisory link points to a stable channel update announcement but does not explicitly confirm if this specific issue is fixed in that update.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary scripts or inject HTML in the context of the affected browser, potentially leading to unauthorized actions or data exposure within the user's browsing session. The impact is classified as medium severity by Chromium security. There are no known exploits in the wild at the time of this report.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to the latest stable version of Google Chrome as soon as possible to ensure any fixes are applied. If an update is not immediately available, exercise caution when visiting untrusted or suspicious websites that could exploit this vulnerability.