This vulnerability in Google Chrome for iOS before version 151.0.7922.72 arises from an inappropriate implementation that enables a remote attacker to bypass the same origin policy. Exploitation requires user interaction through specific UI gestures on a maliciously crafted HTML page. The issue is tracked as CWE-346 (Origin Validation Error) and has a CVSS v3.1 base score of 6.5, indicating a medium severity. No known exploits are reported in the wild. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation details.

Successful exploitation allows an attacker to bypass the same origin policy, potentially compromising the integrity of web content by enabling unauthorized interactions or modifications. Confidentiality and availability impacts are not indicated. The attack requires user interaction, reducing the likelihood of automated exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should update Google Chrome for iOS to version 151.0.7922.72 or later once confirmed patched. Until then, caution with untrusted web content and avoiding unsolicited UI interactions may reduce risk.