This vulnerability arises from an inappropriate implementation in the WebAppInstalls feature of Google Chrome before version 150.0.7871.47. It allows a remote attacker to bypass the same origin policy by crafting a malicious HTML page. The same origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. Bypassing this policy can lead to unauthorized actions or data manipulation within the browser context. The CVSS score is 6.5 (medium), indicating a moderate impact primarily on integrity. No known exploits are reported in the wild at this time.

The vulnerability allows remote attackers to bypass the same origin policy, potentially enabling unauthorized modification of web content or execution of actions within the context of another origin. This impacts the integrity of web applications accessed via the affected Chrome versions. There is no reported impact on confidentiality or availability. No known exploits in the wild have been reported.

No explicit patch or remediation level is confirmed in the provided data. The affected version is prior to 150.0.7871.47, which suggests that updating to version 150.0.7871.47 or later may address the issue. Users and administrators should monitor the official Google Chrome release blog for updates and apply the latest stable updates promptly. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance.