This vulnerability in Google Chrome relates to insufficient enforcement of the PermissionsPolicy, a security feature designed to restrict certain browser behaviors. In versions before 150.0.7871.47, an attacker can bypass navigation restrictions by crafting a malicious HTML page, potentially leading to unauthorized actions or integrity violations within the browser context. The CVSS score is 6.5 (medium severity) with an attack vector of network, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

The vulnerability allows a remote attacker to bypass navigation restrictions in affected versions of Google Chrome, potentially leading to integrity violations within the browser. There is no impact on confidentiality or availability. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to version 150.0.7871.47 or later once confirmed. Until then, no specific mitigation steps are provided by the vendor.