The vulnerability is an incorrect authorization flaw in the navigation component of Google Chrome on iOS. It allows a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page, as described in the updated CVE description. (CWE-863). The official Chromium assessment labels the severity as Medium, indicating that the flaw can expose sensitive information without granting arbitrary code execution.

Google Chrome on iOS versions earlier than 156.0.8078.47 are affected. The issue is tied to the Navigation module and affects the sandboxed rendering environment of mobile Chrome installations.

The risk remains moderate, reflected by a CVSS score of 6.5. The EPSS score is low, at less than 1 percent, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote, relying on a crafted HTML page that a user must load in the browser. No additional exploitation preconditions are documented, and the flaw does not appear to enable further privilege escalation or denial of service beyond reaching a privileged page.