This vulnerability in Google Chrome relates to insufficient enforcement of sandbox policies within IFrames on Windows versions before 148.0.7778.168. An attacker can craft an HTML page that bypasses navigation restrictions intended by the sandbox, potentially leading to unauthorized navigation actions. The CVSS score is 4.3 (medium), reflecting a network attack vector with low complexity, no privileges required, and user interaction needed. The impact is limited to integrity with no confidentiality or availability impact. No official remediation level or patch status is explicitly stated in the provided vendor advisory link.

The vulnerability allows a remote attacker to bypass navigation restrictions in the IFrame Sandbox, which could lead to limited integrity issues such as unauthorized navigation or redirection within the browser context. There is no impact on confidentiality or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for current remediation guidance. Until confirmation of a fix, users should exercise caution when interacting with untrusted HTML content that may exploit IFrame sandbox restrictions.