This vulnerability in Google Chrome involves insufficient validation of untrusted input within HTML processing, which can be exploited by a remote attacker to inject arbitrary scripts or HTML content. This leads to a UXSS vulnerability, potentially allowing script execution in the context of trusted web pages. The issue affects Chrome versions before 150.0.7871.47. The Chromium security team rates this vulnerability as low severity. No CVSS score or detailed remediation level is provided in the data, but a vendor advisory URL is available for further information.

The impact is limited to the ability of a remote attacker to inject arbitrary scripts or HTML via crafted HTML pages, causing a UXSS condition. This could potentially allow script execution in the context of trusted sites, but the severity is considered low by Chromium security. There are no known exploits in the wild reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Since no explicit remediation level or patch link is provided, users should monitor official Google Chrome release notes and update to version 150.0.7871.47 or later once available.