This vulnerability in Google Chrome's Cast component involves insufficient validation of untrusted input, which can be exploited by a remote attacker to bypass the same origin policy via a crafted HTML page. The affected versions are those prior to 151.0.7922.72. The CVSS 3.1 base score is 4.3, indicating medium severity, with attack vector network, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact. The vendor has published an advisory linked in the data but has not explicitly stated the remediation level or patch availability in the provided information.

The vulnerability allows a remote attacker to bypass the same origin policy, potentially enabling limited unauthorized actions or information access within the browser context. The impact is rated as medium severity with low integrity impact and no confidentiality or availability impact. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should monitor this advisory for updates and apply any official fixes once available. Until then, caution with untrusted content involving the Cast feature is advised.