This vulnerability (CVE-2026-13930) affects Google Chrome versions before 150.0.7871.47 and is caused by insufficient policy enforcement in the Actor component. It enables a remote attacker to bypass navigation restrictions by crafting a malicious HTML page. The issue is classified under CWE-602 (Insufficient Control of Functionality). The CVSS 3.1 base score is 6.5 (medium), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor advisory URL is provided but does not explicitly state patch availability or remediation details.

The vulnerability allows remote attackers to bypass navigation restrictions, potentially leading to unauthorized navigation actions within the browser context. This impacts the integrity of the browsing session but does not affect confidentiality or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor advisory does not explicitly confirm a fix, users and administrators should monitor the official Chrome release notes and update to version 150.0.7871.47 or later once confirmed. No additional mitigation steps are specified by the vendor.