This vulnerability, tracked as CVE-2026-14054, affects Google Chrome versions before 150.0.7871.47. It arises from insufficient enforcement of navigation policies in the network subsystem, enabling remote attackers to bypass restrictions via crafted HTML content. The CVSS 3.1 base score is 4.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction needed, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. The vendor advisory linked does not explicitly confirm a patch or remediation status.

The impact is limited to integrity as the vulnerability allows bypassing navigation restrictions, potentially enabling unauthorized navigation actions. There is no confidentiality or availability impact reported. No known exploits in the wild have been identified.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Until official fixes are confirmed, users should exercise caution with untrusted HTML content and consider updating Chrome to the latest available version once updates are released.