This vulnerability in Google Chrome's network policy enforcement allows an attacker positioned within a privileged network context to bypass navigation restrictions by leveraging crafted HTML content. The issue is classified under CWE-602 (Insufficient Enforcement of a Security Policy). The CVSS v3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, no privileges required, user interaction required, and impact limited to integrity. The affected versions are those prior to 150.0.7871.47. The vendor advisory URL is provided but does not explicitly state if a fix has been released.

An attacker in a privileged network position can bypass navigation restrictions, potentially leading to unauthorized navigation actions within the browser. The impact is limited to integrity and does not affect confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until a fix is confirmed, users should exercise caution when browsing untrusted networks and avoid interacting with suspicious HTML content that could exploit this vulnerability.