The vulnerability is a confused deputy flaw in the PriceTracking component of Google Chrome on iOS before version 153.0.8010.47. It enables a remote attacker, through social engineering and specially crafted network traffic, to circumvent system access controls and gain access to a privileged page. This type of vulnerability involves improper delegation of authority, allowing an attacker to exploit the component to perform unauthorized actions.

An attacker can bypass system access restrictions and access privileged pages within the browser environment on affected versions of Google Chrome on iOS. This could potentially lead to unauthorized information disclosure or actions within the privileged context. The severity is rated medium by the Chromium security team.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The description indicates that versions prior to 153.0.8010.47 are affected, implying that updating to version 153.0.8010.47 or later may address the issue, but this is not explicitly confirmed in the provided data.