This vulnerability arises from insufficient validation of untrusted input within the Cast component of Google Chrome versions before 149.0.7827.53. An attacker positioned on the same local network segment could exploit this by delivering a specially crafted HTML page to escalate privileges. The issue is classified as low severity by the Chromium security team. The vendor advisory is available but does not explicitly state if a fix has been released or if users must take action.

An attacker on the local network segment may leverage this vulnerability to escalate privileges on the affected system via a crafted HTML page. The impact is limited by the requirement for local network access and the low severity rating indicates the risk is relatively low compared to more critical vulnerabilities. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official confirmation of a fix, users should exercise caution when interacting with untrusted content on local networks. No vendor advisory states that no action is required or that the issue is already mitigated.