This vulnerability in Google Chrome's Speech feature allows insufficient enforcement of security policies, enabling a remote attacker to bypass site isolation protections via a crafted HTML page. The issue affects versions prior to 151.0.7922.72. The CVSS 3.1 score is 6.5 (medium severity) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vulnerability is tracked as CWE-602 (Insufficiently Controlled Modification of Object Prototype Attributes).

An attacker can bypass site isolation in affected Chrome versions, potentially allowing them to interfere with the integrity of web content or processes. There is no impact on confidentiality or availability. The vulnerability requires user interaction and can be exploited remotely over the network.

The vendor advisory linked does not explicitly state the patch or remediation status. Since the vulnerability affects versions prior to 151.0.7922.72, updating to version 151.0.7922.72 or later is recommended. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.