This vulnerability in Google Chrome arises from insufficient validation of untrusted input in the WebRTC implementation. An attacker can exploit this flaw by delivering a specially crafted HTML page, resulting in privilege escalation on the affected system. The issue affects Chrome versions prior to 150.0.7871.47. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires low attack complexity, user interaction, and results in high impact on confidentiality, integrity, and availability. The vendor advisory is available but does not explicitly state if a patch has been released.

Successful exploitation allows a remote attacker to escalate privileges on the victim's system, potentially leading to full compromise of user data and system integrity. The high CVSS score reflects significant risk to confidentiality, integrity, and availability of the affected system. No known active exploits have been reported, which may reduce immediate risk but does not eliminate the threat.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until a patch is confirmed, users should exercise caution when interacting with untrusted web content, especially involving WebRTC features. Monitor official Google Chrome release notes for updates and apply updates promptly once available.