An incorrect authorization flaw in the Navigation component of Google Chrome before version 156.0.8078.47 can be triggered by a maliciously crafted HTML page. The flaw allows the browser to bypass system access restrictions, enabling a remote attacker to access privileged pages that would normally be inaccessible. The vulnerability is rated as Medium severity by Chromium, indicating that it could lead to unauthorized access to privileged content.

Google Chrome desktop browsers running any version earlier than 156.0.8078.47 are affected. The CVE description does not reference mobile or other operating systems, so the impact is confirmed only for desktop deployments.

The vulnerability has a CVSS score of 8.8 and an EPSS score of below 1 %, indicating high severity but low likelihood of exploitation. It is not listed in the CISA KEV catalog. Exploitation requires a victim to visit a malicious web page that triggers the navigation‑by‑pass. Once triggered, the attacker can load privileged pages that are normally protected, potentially leading to unauthorized data exposure or further exploitation. Given the high severity, the risk remains significant and warrants prompt remediation.