This vulnerability in Google Chrome for iOS versions before 150.0.7871.47 arises from insufficient validation of untrusted input. An attacker who convinces a user to perform certain UI gestures on a maliciously crafted HTML page can bypass navigation restrictions. The issue is classified under CWE-20 (Improper Input Validation). The CVSS v3.1 base score is 6.5 (medium severity), with attack vector network, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor advisory linked does not explicitly state if a fix is available or if the issue is mitigated.

The vulnerability allows an attacker to bypass navigation restrictions in Chrome for iOS, potentially leading to unauthorized actions or integrity violations within the browser context. There is no impact on confidentiality or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor the official Google Chrome release notes and update to version 150.0.7871.47 or later once confirmed fixed. Until then, caution is advised when interacting with untrusted web content requiring UI gestures.