This vulnerability involves a policy bypass in the IFrameSandbox implementation in Google Chrome before version 147.0.7727.55. An attacker can exploit this by tricking a user into performing certain UI gestures on a maliciously crafted HTML page, thereby bypassing navigation restrictions intended by the sandbox. The issue is categorized as low severity by Chromium security. No CVSS score or detailed technical exploit information is provided. The vendor advisory references a stable channel update that presumably addresses this issue.

The impact is limited to bypassing navigation restrictions within sandboxed iframes, which could potentially allow an attacker to circumvent intended UI constraints. The severity is considered low, and no known active exploitation has been reported. This reduces the immediate risk to users but still represents a security weakness in Chrome's sandboxing model.

A fix is available in Google Chrome version 147.0.7727.55 and later. Users and administrators should update to this version or a more recent one to remediate the vulnerability. Since this is not a cloud service, remediation requires applying the browser update. The vendor advisory linked should be consulted for the official update and confirmation of the fix.