This vulnerability involves insufficient policy enforcement within the Content Settings component of Google Chrome versions before 149.0.7827.53. An attacker can craft an HTML page that bypasses discretionary access control policies, potentially allowing unauthorized actions that should be restricted by these policies. The Chromium security team has rated this issue as low severity. The vulnerability was publicly disclosed on June 4, 2026. No CVSS score or detailed technical exploitation information is provided. The vendor advisory URL points to a stable channel update announcement but does not explicitly mention this specific vulnerability's patch status.

The impact is a policy bypass that could allow a remote attacker to circumvent discretionary access controls in Chrome's Content Settings. This could lead to unauthorized access or actions that are normally restricted by user or administrator policies. However, the severity is considered low by the vendor, and no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects Chrome versions prior to 149.0.7827.53, updating to version 149.0.7827.53 or later is advisable if the vendor advisory confirms the fix in that release. Monitor official Google Chrome release notes for explicit confirmation of remediation.