This vulnerability in Google Chrome affects the SplitView component before version 150.0.7871.47. It permits a remote attacker, with control over the renderer process, to bypass navigation restrictions by leveraging a specially crafted HTML page. The issue is classified under CWE-284 (Improper Access Control) and has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No known exploits are reported in the wild. The vendor advisory linked does not explicitly state a remediation level or patch availability.

An attacker who has already compromised the renderer process can bypass navigation restrictions, potentially leading to unauthorized navigation actions within the browser context. This could facilitate further exploitation or unauthorized behavior within the browser session. There is no indication of confidentiality or availability impact, but integrity is impacted due to the bypass of restrictions.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted content and consider limiting exposure to renderer process compromises.