This vulnerability in Google Chrome's network component involves insufficient validation of untrusted input, classified under CWE-20. It allows a remote attacker with control over the renderer process to bypass navigation restrictions via a crafted HTML page. The issue affects Chrome versions prior to 150.0.7871.47. The CVSS 3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor advisory linked does not explicitly confirm a patch or remediation status.

An attacker who has compromised the renderer process can bypass navigation restrictions, potentially leading to unauthorized navigation actions within the browser. This impacts the integrity of the browsing session but does not affect confidentiality or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until a fix is confirmed, users should exercise caution with untrusted content and avoid interacting with suspicious web pages. No official fix or temporary workaround is explicitly stated in the provided data.