This vulnerability in Google Chrome for iOS versions before 151.0.7922.72 is due to insufficient enforcement of discretionary access control policies. A remote attacker can exploit this by delivering a crafted HTML page that bypasses these controls, potentially leading to unauthorized modification of data or actions within the browser context. The CVSS 3.1 base score is 6.5 (medium), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vulnerability is tracked as CWE-284 (Improper Access Control).

The vulnerability allows a remote attacker to bypass discretionary access control in Chrome for iOS, potentially enabling unauthorized integrity violations such as unauthorized modification of data or actions within the browser. Confidentiality and availability are not impacted. There are no known exploits in the wild at this time.

The vendor advisory link provided does not explicitly confirm a patch or remediation status for this vulnerability. Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users should update to version 151.0.7922.72 or later once confirmed patched by the vendor.