This vulnerability involves an inappropriate implementation in the password management component of Google Chrome before version 150.0.7871.47. It enables a remote attacker to bypass navigation restrictions by leveraging a specially crafted HTML page. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vulnerability is publicly disclosed with no explicit remediation level or patch link provided in the data, but a vendor advisory URL is available.

An attacker can bypass navigation restrictions remotely, potentially allowing unauthorized actions that affect the integrity of the browser's password management. There is no impact on confidentiality or availability reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Since no explicit patch or remediation level is stated, users should monitor official Google Chrome updates and apply the update to version 150.0.7871.47 or later once available.