This vulnerability in Google Chrome on Android versions before 150.0.7871.47 stems from improper validation of untrusted input within the Input implementation. An attacker with control over the renderer process can exploit this flaw to bypass site isolation protections by crafting a malicious HTML page. Site isolation is a security feature designed to separate different websites into distinct processes to prevent data leaks and cross-site attacks. The CVSS score is 6.5 (medium severity), indicating a moderate impact primarily on integrity without affecting confidentiality or availability.

The vulnerability allows an attacker who has already compromised the renderer process to bypass site isolation, potentially enabling them to interfere with or manipulate content from other sites within the browser process. This could lead to integrity violations such as unauthorized modification of web content. There is no direct impact on confidentiality or availability according to the CVSS vector. No known exploits in the wild have been reported.

The vulnerability affects Google Chrome on Android versions prior to 150.0.7871.47. Users and administrators should update to version 150.0.7871.47 or later to remediate this issue. The vendor advisory linked does not explicitly state the patch status, but the affected version indicates that 150.0.7871.47 includes the fix. Patch status is not yet confirmed explicitly in the advisory; therefore, verify the vendor advisory for the latest remediation guidance.