This vulnerability in Google Chrome on Android arises from insufficient validation of untrusted input within the WebAppInstalls feature. Exploitation enables a local attacker to bypass the same origin policy, potentially allowing unauthorized access to web resources that should be isolated by origin. The affected version is prior to 150.0.7871.115. The vulnerability is classified as high severity by Chromium security. No detailed CVSS score or confirmed remediation status is provided in the input data.

The vulnerability allows a local attacker to bypass the same origin policy, which is a fundamental security control in web browsers designed to isolate content from different origins. Bypassing this policy can lead to unauthorized access to sensitive information or actions within web applications. However, there are no known exploits in the wild as per the provided data.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted local content. No vendor advisory explicitly states that no action is required or that the issue is already mitigated.