This vulnerability arises from insufficient validation of untrusted input in the navigation functionality of Google Chrome versions before 151.0.7922.72. An attacker with control over the renderer process can exploit this flaw by crafting a malicious HTML page to bypass navigation restrictions. The issue was assigned a CVSS score of 6.5 (medium severity) with the vector indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vulnerability was publicly disclosed with a vendor advisory link provided by Google.

The vulnerability allows an attacker who has already compromised the renderer process to bypass navigation restrictions, potentially leading to unauthorized navigation actions within the browser. This impacts the integrity of the browser's navigation but does not compromise confidentiality or availability. There are no reports of active exploitation in the wild.

Google has released an update in Chrome version 151.0.7922.72 that addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. Since this is a client-side vulnerability in a desktop browser, applying the official update is the recommended and effective mitigation.