This vulnerability involves an inappropriate implementation in the Forms feature of Google Chrome before version 150.0.7871.115. It permits a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page, leading to a UXSS vulnerability categorized under CWE-79. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity, with no impact on availability. The vulnerability is publicly known but no known exploits in the wild have been reported. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level in the given data.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts or inject HTML in the context of the victim's browser, potentially leading to information disclosure or manipulation of web content. The impact is rated medium with limited confidentiality and integrity impact and no availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is confirmed.