CVE-2026-17813 is a medium severity vulnerability in Google Chrome for iOS versions before 151.0.7922.72. It arises from insufficient policy enforcement that enables a remote attacker to bypass navigation restrictions via a specially crafted HTML page. The vulnerability is classified under CWE-602 (Improper Restriction of XML External Entity Reference). The CVSS 3.1 base score is 6.5 with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There is no information about an official patch or vendor advisory in the provided data.

The vulnerability allows a remote attacker to bypass navigation restrictions in Chrome for iOS, potentially leading to unauthorized actions that affect the integrity of the browsing session. There is no direct impact on confidentiality or availability. The attack requires user interaction and can be executed over the network without privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is confirmed, users should exercise caution when interacting with untrusted web content in Chrome for iOS. Monitor official Google Chrome security advisories for updates and apply updates promptly once available.