This vulnerability in Google Chrome's navigation handling allows insufficient validation of untrusted input. Specifically, a remote attacker with control over the renderer process can bypass navigation restrictions by crafting a malicious HTML page. The issue affects versions prior to 150.0.7871.125. The CVSS 3.1 base score is 6.5 (medium), with an attack vector of network, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor advisory linked does not explicitly confirm patch availability or remediation level.

An attacker who has already compromised the renderer process can bypass navigation restrictions, potentially leading to unauthorized navigation actions that affect the integrity of the browsing session. There is no impact on confidentiality or availability. This could facilitate further attacks or unauthorized actions within the browser context.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html for current remediation guidance. Until official confirmation, users should update to version 150.0.7871.125 or later if available, as the vulnerability affects versions prior to this. No other specific mitigations are provided by the vendor advisory.