This vulnerability arises from insufficient validation of untrusted input in the Omnibox component of Google Chrome on iOS versions before 150.0.7871.47. An attacker who convinces a user to perform specific UI gestures can bypass navigation restrictions via malicious network traffic. The issue is tracked as CWE-20 (Improper Input Validation) and has a CVSS 3.1 base score of 6.5, indicating a medium severity. The vulnerability affects the integrity of the browser's navigation controls but does not impact confidentiality or availability. The vendor advisory link is provided but does not explicitly state if a patch is available or if a workaround exists.

The vulnerability allows a remote attacker to bypass navigation restrictions in the Chrome iOS Omnibox by exploiting insufficient input validation combined with user interaction. This can lead to integrity violations, such as unauthorized navigation or redirection, but does not affect confidentiality or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official confirmation of a fix, users should exercise caution with untrusted links and avoid performing unexpected UI gestures in Chrome on iOS versions prior to 150.0.7871.47.