This vulnerability in Google Chrome affects the Chromecast feature before version 150.0.7871.47. Due to insufficient policy enforcement, a remote attacker can escalate privileges by delivering a specially crafted HTML page. The CVSS 3.1 vector indicates that the attack can be performed remotely over the network with low attack complexity, no privileges required, but requires user interaction. Successful exploitation results in high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed with no explicit remediation level or patch status provided in the vendor advisory, but the affected versions are prior to 150.0.7871.47.

An attacker can remotely escalate privileges on an affected system by exploiting insufficient policy enforcement in Chromecast within Google Chrome. This can lead to full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability requires user interaction but no prior privileges, making it a significant risk if exploited.

The vendor advisory does not explicitly state the availability of a patch or remediation level. However, the affected version is prior to 150.0.7871.47, indicating that updating to version 150.0.7871.47 or later should remediate the vulnerability. Users and administrators should update Google Chrome to version 150.0.7871.47 or newer. Patch status is not yet confirmed in the advisory; check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for the latest remediation guidance.