This vulnerability involves insufficient validation and enforcement of navigation policies in Google Chrome on Android versions before 149.0.7827.53. An attacker with control over the renderer process can bypass navigation restrictions by leveraging a specially crafted HTML page. The issue is classified as low severity by Chromium security. The vulnerability was publicly disclosed on June 4, 2026. No CVSS score or detailed remediation information is provided in the available data. The vendor advisory URL points to a Chrome stable channel update blog but does not explicitly confirm a fix for this specific issue.

The impact is limited to scenarios where an attacker has already compromised the renderer process, allowing them to bypass navigation restrictions. This could potentially facilitate further malicious actions within the browser context. The Chromium security team rates this vulnerability as low severity, indicating limited risk or difficulty in exploitation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome stable channel update blog should be monitored for updates regarding this vulnerability. Until an official fix is confirmed, users should ensure they update Chrome on Android to the latest available version. No additional specific mitigations are provided by the vendor advisory.