This vulnerability in Google Chrome's Media component allows a remote attacker to bypass the same origin policy through a crafted video file. The affected versions are those prior to 148.0.7778.216. The same origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. Bypassing this policy can lead to unauthorized access to sensitive information or cross-origin attacks. The vulnerability is identified as high severity by Chromium security, but no CVSS score or detailed exploitation method is provided. The vendor advisory is referenced but does not explicitly confirm patch availability in the provided data.

A successful exploitation of this vulnerability could allow a remote attacker to bypass the same origin policy in affected versions of Google Chrome, potentially enabling unauthorized cross-origin interactions. This could lead to information disclosure or other security breaches related to web content isolation. No known exploits in the wild have been reported, and the exact impact depends on the attacker's ability to deliver a crafted video file to the victim's browser.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Users and administrators should update Google Chrome to version 148.0.7778.216 or later once confirmed as fixed. Until then, avoid opening untrusted video files in the browser to reduce risk.