This vulnerability arises from incorrect security UI handling in the History Navigation component of Google Chrome before version 147.0.7727.55. It enables a remote attacker to perform UXSS attacks by leveraging insufficient policy enforcement, requiring user interaction with crafted UI gestures. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts confidentiality and integrity but not availability. The vulnerability is tracked as CWE-346 (Origin Validation Error).

Successful exploitation could allow an attacker to inject arbitrary scripts or HTML into the browser context, potentially leading to unauthorized access to sensitive information or manipulation of web content within the affected browser session. However, exploitation requires user interaction and specific UI gestures, limiting the ease of attack. There are no reports of active exploitation in the wild.

The vendor advisory linked does not explicitly state the availability of a patch or remediation. Since the affected version is prior to 147.0.7727.55, users should update to version 147.0.7727.55 or later once confirmed by the vendor advisory. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until then, users should exercise caution with untrusted web content requiring unusual UI gestures.