This vulnerability arises from an inappropriate implementation of NFC in Google Chrome on Android before version 150.0.7871.47. It permits a remote attacker, with control over the renderer process, to bypass policy restrictions and leak data across origins by using a specially crafted HTML page. The issue is classified with medium severity by Chromium security. There is no explicit CVSS score or detailed vendor remediation status provided, though a vendor advisory link is available for further information.

An attacker who has already compromised the renderer process can exploit this vulnerability to leak cross-origin data, potentially exposing sensitive information from other web origins. This could lead to privacy breaches or data leakage within the browser context on affected Android devices.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Since no explicit remediation level or patch link is provided, users should monitor official Google Chrome updates and apply the update to version 150.0.7871.47 or later once available.