This vulnerability (CVE-2026-17805) affects Google Chrome on Android before version 151.0.7922.72. It arises from insufficient policy enforcement in the Glic component, which allows a remote attacker to bypass navigation restrictions by crafting a malicious HTML page. The issue is classified under CWE-602 (Improper Restriction of XML External Entity Reference). The CVSS v3.1 base score is 6.5 (medium severity), with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor advisory linked does not explicitly confirm patch availability or remediation level.

The vulnerability allows a remote attacker to bypass navigation restrictions in Google Chrome on Android, potentially leading to unauthorized navigation actions that compromise the integrity of user browsing sessions. There is no impact on confidentiality or availability. No known exploits are reported in the wild, reducing immediate risk.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users should update to version 151.0.7922.72 or later once confirmed patched. Until then, exercise caution with untrusted HTML content that may attempt to bypass navigation restrictions.