This vulnerability arises from insufficient validation of untrusted input in the WebAppInstalls feature of Google Chrome on Android versions before 150.0.7871.47. A local attacker can exploit this by crafting a malicious HTML page that bypasses discretionary access control mechanisms, potentially leading to unauthorized access or actions within the browser context. The issue has been publicly disclosed but lacks a CVSS score and explicit remediation level in the provided data. The vendor advisory link is available but does not explicitly confirm patch availability or remediation status.

Successful exploitation allows a local attacker to bypass discretionary access control in the affected Chrome browser on Android, potentially leading to unauthorized actions or access within the browser environment. The severity is classified as high by Chromium security standards. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes for updates addressing this vulnerability. Until a fix is confirmed, avoid opening untrusted HTML content locally on affected Chrome versions.