This vulnerability involves insufficient policy enforcement in the ServiceWorker component of Google Chrome before version 151.0.7922.72. An attacker can exploit this flaw by crafting a malicious HTML page to bypass the same origin policy, which is a critical security control designed to prevent web pages from accessing data from different origins. The CVSS score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vulnerability is tracked as CWE-284 (Improper Access Control).

Successful exploitation allows a remote attacker to bypass the same origin policy in Chrome's ServiceWorker, potentially enabling unauthorized actions that compromise the integrity of web content or user data. However, there is no indication of confidentiality or availability impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The provided vendor advisory link to the Chrome stable channel update blog should be monitored for official fixes. Users should update to Chrome version 151.0.7922.72 or later once confirmed patched. Until then, caution with untrusted web content is advised.