This vulnerability in Google Chrome for iOS versions before 151.0.7922.72 stems from insufficient validation of untrusted input, enabling remote attackers to bypass navigation restrictions via a crafted HTML page. The issue affects the integrity of navigation controls within the browser. The CVSS v3.1 score is 6.5 (medium severity) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor advisory link is provided but does not explicitly state if a fix is available or if users must take action.

The vulnerability allows remote attackers to bypass navigation restrictions in affected versions of Chrome for iOS, potentially leading to unauthorized navigation actions that compromise the integrity of the browsing session. There is no impact on confidentiality or availability. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users should update to version 151.0.7922.72 or later once confirmed. Until then, exercise caution when interacting with untrusted content in Chrome for iOS.