This vulnerability in Google Chrome for iOS before version 151.0.7922.72 allows remote attackers to bypass navigation restrictions by leveraging a crafted HTML page. The issue stems from an inappropriate implementation that fails to enforce proper access controls, categorized under CWE-284. The CVSS 3.1 base score is 6.5, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vulnerability is publicly disclosed but no official fix or patch status is explicitly stated in the vendor advisory.

An attacker can remotely bypass navigation restrictions in Chrome for iOS, potentially enabling unauthorized navigation or actions within the browser context. The integrity of the affected system could be compromised, but confidentiality and availability are not impacted. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor advisory link is provided but does not explicitly state if a fix is available. Users should monitor official Google Chrome release notes and update to version 151.0.7922.72 or later once confirmed. Until then, cautious browsing and avoiding untrusted HTML content on Chrome for iOS is advised.