This vulnerability involves an inappropriate implementation in Google Chrome's browser component that permits a remote attacker to bypass navigation restrictions by delivering a specially crafted HTML page. It affects Chrome versions prior to 149.0.7827.53. The Chromium security team rates the severity as low. The vulnerability was publicly disclosed on June 4, 2026. No CVSS score or detailed technical exploit information is provided. The vendor advisory references a stable channel update but does not explicitly confirm if this issue is fixed in that update.

The impact is limited to bypassing navigation restrictions within the browser, which could potentially allow an attacker to redirect or manipulate user navigation in a way not intended by the browser's security model. The severity is considered low by the Chromium security team, indicating limited risk or impact. No known exploits have been reported, suggesting low immediate threat.

The vendor advisory linked points to a stable channel update for Google Chrome desktop but does not explicitly confirm the patch status for this vulnerability. Therefore, patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update to the latest stable version of Chrome when available to ensure any fixes are applied. No additional mitigation steps are specified by the vendor.