This vulnerability arises from insufficient validation of untrusted input within the Reading List feature of Google Chrome on iOS versions before 149.0.7827.53. An attacker can exploit this by convincing a user to perform certain UI gestures on a maliciously crafted HTML page, resulting in privilege escalation. The issue is classified as low severity by the Chromium security team. The vendor advisory linked does not explicitly confirm whether a patch is available or provide remediation details.

Successful exploitation could allow a remote attacker to escalate privileges on the affected Chrome browser on iOS, potentially leading to unauthorized actions within the browser context. However, the impact is considered low severity by the Chromium security team, and no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until official fixes are confirmed, users should exercise caution when interacting with untrusted web content, especially involving UI gestures in the Reading List feature.