This vulnerability in Google Chrome's Bluetooth implementation prior to version 150.0.7871.47 results from insufficient policy enforcement, enabling a remote attacker to perform privilege escalation via a specially crafted HTML page. The CVSS 3.1 score is 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No explicit remediation level or patch availability is stated in the provided data, but the affected versions are prior to 150.0.7871.47. The vendor advisory link is provided but does not explicitly confirm patch status in the input data.

Successful exploitation allows a remote attacker to escalate privileges on the affected system through crafted web content exploiting Bluetooth policy enforcement weaknesses. This can lead to full compromise of confidentiality, integrity, and availability of the affected Chrome browser environment.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites, especially those that might use Bluetooth features. No vendor advisory states that no action is required or that the issue is already mitigated.