This vulnerability involves an inappropriate implementation in the ImageCapture API within Google Chrome before version 149.0.7827.53. An attacker who has compromised the renderer process can exploit this flaw to escalate privileges by delivering a specially crafted HTML page. The issue is classified as low severity by Chromium's security team. No known exploits in the wild have been reported. The vendor advisory linked does not explicitly confirm patch availability or remediation status.

The impact is limited to privilege escalation from a compromised renderer process, which implies that an attacker must first have some level of control within the renderer context. The escalation could allow the attacker to gain higher privileges within the browser process. The severity is considered low by the Chromium security team, indicating limited impact or difficulty of exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 149.0.7827.53 or later once available. Until a patch is confirmed, limiting exposure to untrusted web content and maintaining general browser security best practices is advisable.