This vulnerability in Google Chrome versions before 149.0.7827.53 is due to insufficient policy enforcement in the Actor component. An attacker can exploit this by crafting a malicious HTML page that bypasses navigation restrictions, potentially causing the browser to navigate to unintended locations. The issue is recognized as a medium severity security flaw with a CVSS 3.1 base score of 6.5, indicating a network attack vector with low attack complexity, no privileges required, but requiring user interaction. The impact is primarily on integrity, with no confidentiality or availability impact noted. No known exploits are reported in the wild. The vendor has published an advisory linked to a stable channel update, but no explicit patch or remediation level is stated in the provided data.

The vulnerability allows remote attackers to bypass navigation restrictions in affected Chrome versions, potentially leading to unauthorized navigation actions that could be leveraged for further attacks or user deception. There is no direct impact on confidentiality or availability, but integrity is impacted due to the ability to manipulate navigation policies.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Since no explicit patch or remediation level is provided in the data, users and administrators should monitor official Google Chrome updates and apply the latest stable version once it includes a fix for this issue.