This vulnerability in Google Chrome affects the password management component by insufficiently enforcing security policies. Specifically, it allows a remote attacker to bypass the same origin policy, which is a fundamental browser security mechanism, through a crafted HTML page. The issue is identified in versions prior to 150.0.7871.115. The CVSS vector indicates the attack can be performed remotely with low complexity and requires user interaction, resulting in limited confidentiality impact without affecting integrity or availability. No known exploits in the wild have been reported. The vendor advisory does not explicitly confirm a patch or remediation status.

An attacker can bypass the same origin policy in affected versions of Google Chrome, potentially allowing unauthorized access to password-related data across origins. The impact is limited to confidentiality with no known effect on integrity or availability. This could lead to partial exposure of sensitive password information under certain conditions.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with untrusted web content and consider updating to the latest Chrome version once available.