A flaw in Chrome for iOS Signin implementation allows a remote adversary to craft an HTML page that bypasses navigation restrictions. The vulnerability is classified as a medium severity issue by Chromium. If exploited, the attacker can cause the browser to navigate to pages or capabilities that should normally be blocked, potentially leading to unauthorized access or data exposure within the browsing context. The weakness reflects improper enforcement of navigation policies, an access control issue that undermines the intended security controls.

Google Chrome for iOS – versions older than 149.0.7827.53. Users running the mentioned or any earlier stable channel are vulnerable. No specific device or OS version constraints beyond iOS are listed.

The EPSS score is less than 1%, indicating a low probability of exploitation, and the CVSS score of 6.5 classifies the vulnerability as medium severity. The lack of a publicly known exploit and absence from the CISA KEV catalog suggest a lower likelihood of widespread exploitation. Nonetheless, the vulnerability can be triggered from a remote web page, implying that any user opening a malicious site while Chrome is active could be affected. The attack vector is clearly remote via network.