This vulnerability in Google Chrome on Windows arises from insufficient policy enforcement in the Media component, which allows a remote attacker to bypass site isolation protections via a crafted HTML page. The issue affects versions prior to 150.0.7871.47. The CVSS score is 6.5 (medium severity) with an attack vector of network, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor advisory is available but does not explicitly state the patch or remediation status.

A remote attacker can bypass site isolation protections, potentially leading to integrity violations within the browser process. There is no confidentiality or availability impact reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until confirmation of a fix, users should exercise caution with untrusted content and consider updating to version 150.0.7871.47 or later once confirmed.