This vulnerability involves incorrect authorization in the PushAPI component of Google Chrome versions prior to 153.0.8010.36. An attacker with control over the renderer process can bypass the web origin policy by delivering a crafted HTML page, potentially enabling unauthorized access to web content. The vulnerability is classified as medium severity by Chromium security. The vendor advisory linked references a stable channel update but does not explicitly confirm if this update addresses the issue.

If exploited, the vulnerability could allow an attacker who has already compromised the renderer process to bypass the web origin policy, potentially accessing or manipulating web content that should be restricted. This could undermine the security model of web applications relying on origin-based access controls. However, exploitation requires prior compromise of the renderer process, limiting the attack surface.

The vendor advisory linked should be consulted for the latest remediation status. Since the advisory references a stable channel update for Chrome, it is likely that updating to version 153.0.8010.36 or later addresses the vulnerability. Users and administrators should update Chrome to the latest stable release to mitigate this issue. Patch status is not explicitly confirmed in the advisory; therefore, verify the update details from the vendor advisory URL.