This vulnerability involves insufficient enforcement of CSS-related policies in Google Chrome versions before 149.0.7827.53. An attacker could exploit this weakness by crafting a malicious HTML page that causes cross-origin data leakage, bypassing intended security policies. The issue is classified as low severity by the Chromium security team. The vulnerability was publicly disclosed on June 4, 2026. The vendor advisory URL is provided but does not explicitly state patch or remediation details.

The impact is limited to potential cross-origin data leakage caused by insufficient CSS policy enforcement. This could allow a remote attacker to access data from other origins that should be protected by the browser's same-origin policy. No known active exploitation has been reported, and the severity is considered low.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official confirmation, users should update to the latest Chrome version once available. No additional mitigation steps are specified by the vendor.