This vulnerability in Google Chrome affects versions before 149.0.7827.155 and involves insufficient validation of untrusted input within the browser's input handling. An attacker who has already compromised the renderer process can exploit this flaw to bypass the same origin policy, potentially enabling unauthorized access to data or actions across different origins. The vulnerability was publicly disclosed and is tracked as CVE-2026-12453. The vendor advisory linked does not explicitly state the patch or remediation status, but the affected version is exactly 149.0.7827.155, implying that this version is vulnerable.

The vulnerability allows bypassing the same origin policy, which is a fundamental security control in web browsers to isolate content from different origins. Exploitation requires prior compromise of the renderer process, which may limit the attack surface. Successful exploitation could lead to unauthorized access to sensitive information or cross-origin interactions that violate security boundaries.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html for current remediation guidance. Until an official fix or update is confirmed, users should exercise caution with untrusted content and consider applying any available updates promptly once released.