This vulnerability arises from insufficient enforcement of security policies in the History Navigation component of Google Chrome versions before 147.0.7727.55. An attacker who convinces a user to perform certain UI gestures on a maliciously crafted HTML page can exploit this to inject arbitrary scripts or HTML, resulting in a UXSS (Universal Cross-Site Scripting) condition. The issue is classified as low severity by the Chromium security team. The vendor advisory linked corresponds to a stable channel update that likely addresses this issue, but explicit patch confirmation is not stated in the provided data.

Successful exploitation could allow an attacker to execute arbitrary scripts or inject HTML content in the context of the victim's browser session, potentially leading to UI spoofing or other low-severity impacts. However, the severity is rated low, and no known exploits have been reported in the wild.

Check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for the latest update status and apply the Chrome stable channel update version 147.0.7727.55 or later to remediate this vulnerability. Since this is a client-side browser issue, updating to the fixed version is the recommended mitigation. Patch status is not explicitly confirmed in the data, so verifying the vendor advisory for current remediation guidance is advised.