This vulnerability in Google Chrome's Serial API arises from insufficient policy enforcement, enabling a remote attacker to perform privilege escalation through a specially crafted HTML page. It affects versions prior to 150.0.7871.47. The CVSS 3.1 score of 8.8 reflects high impact across confidentiality, integrity, and availability. The vulnerability is categorized under CWE-602 (Insufficient Control of a Resource Through its Lifetime). Although a vendor advisory is provided, it does not explicitly state if a fix has been released or if mitigation steps are available.

Successful exploitation allows a remote attacker to escalate privileges on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the user environment. The high CVSS score indicates severe consequences if exploited.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official fixes or mitigations are confirmed, users should exercise caution when interacting with untrusted web content, especially pages that may leverage the Serial API.