This vulnerability involves insufficient enforcement of security policies in Google Chrome on iOS versions before 149.0.7827.53. It enables a remote attacker to bypass discretionary access control mechanisms by delivering a specially crafted HTML page. The issue is classified as low severity by the Chromium security team. No CVSS score or detailed technical exploitation information is provided. The vendor advisory linked does not explicitly state if a fix has been released, but the affected version suggests that updating to 149.0.7827.53 or later may address the issue.

The impact is limited to bypassing discretionary access control in Chrome for iOS, potentially allowing unauthorized access to certain resources or actions within the browser context. The severity is rated low by the Chromium security team, indicating limited risk or difficulty in exploitation. No known active exploits have been reported.

Patch status is not yet confirmed—check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users of Chrome on iOS should update to version 149.0.7827.53 or later when available to mitigate this vulnerability. No additional mitigation steps are specified by the vendor.