This vulnerability involves a policy bypass in ServiceWorkers within Google Chrome before version 147.0.7727.55. An attacker can bypass the content security policy by delivering a specially crafted HTML page, potentially undermining the intended security restrictions enforced by the browser. The issue is recognized by Chromium security as low severity. The vendor has published a stable channel update announcement, but no explicit patch or remediation details are confirmed from the advisory. The vulnerability does not affect cloud services and no known active exploitation is reported.

The impact is limited to bypassing content security policy restrictions via ServiceWorkers in affected Chrome versions. This could allow an attacker to circumvent security controls designed to restrict content sources, potentially leading to reduced protection against certain web-based attacks. However, the severity is assessed as low by the vendor, and no active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update to Chrome version 147.0.7727.55 or later once the vendor confirms the fix. Until then, no specific mitigation steps are provided by the vendor advisory. Monitoring the official Chrome release notes and applying updates promptly is recommended.