This vulnerability involves an inappropriate implementation in the Extensions component of Google Chrome versions before 149.0.7827.155. It allows an attacker who successfully persuades a user to install a malicious Chrome extension to bypass the same origin policy, potentially enabling unauthorized access to resources across different origins. The vulnerability was publicly disclosed with a high severity rating by Chromium security. The vendor advisory link is provided but does not explicitly state patch or remediation details in the input data.

An attacker can bypass the same origin policy by exploiting this vulnerability through a malicious Chrome extension installed by the user. This can lead to unauthorized access to web resources that are normally restricted by origin boundaries, potentially compromising user data or session integrity. There are no known exploits in the wild reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html for current remediation guidance. Users should avoid installing untrusted or suspicious Chrome extensions until an official fix or update is confirmed.