This vulnerability in Google Chrome's IndexedDB implementation arises from insufficient validation of untrusted input. An attacker who has already compromised the renderer process could exploit this flaw to bypass the same origin policy, potentially enabling unauthorized actions or data manipulation across origins. The CVSS score is 5.3 (medium), reflecting a network attack vector with high attack complexity and requiring user interaction. The vulnerability affects versions prior to 149.0.7827.53. The vendor advisory linked does not explicitly state the availability of a patch or fix.

The vulnerability allows bypassing the same origin policy, which can lead to integrity violations such as unauthorized modification of data or actions across origins. Confidentiality and availability impacts are not indicated. Exploitation requires prior compromise of the renderer process and user interaction, limiting the ease of exploitation. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until a patch is confirmed, users should exercise caution with untrusted content and consider applying any available Chrome updates promptly once released.