A vulnerability in the Popup Blocker component of Google Chrome prior to version 148.0.7778.96 allows a remote attacker who has compromised the renderer process to bypass navigation restrictions by using a crafted HTML page. The issue is due to insufficient validation of untrusted input.