This vulnerability in Google Chrome for iOS versions before 151.0.7922.72 allows remote attackers to bypass navigation restrictions by leveraging a crafted HTML page. The issue is categorized as CWE-601, indicating an open redirect or similar navigation control bypass. The CVSS v3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation status.

An attacker can bypass navigation restrictions in affected Chrome for iOS versions, potentially redirecting users to unintended web pages. The impact is limited to integrity loss without confidentiality or availability compromise. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when interacting with untrusted web content on affected versions.