Insufficient validation of untrusted input in Navigation allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. The attacker can cause the affected browser to navigate to arbitrary URLs or load unintended content, enabling phishing, credential theft, or other malicious actions. The vulnerability therefore undermines the integrity of navigation controls but does not directly allow arbitrary code execution.

Google Chrome distributed on all operating systems. Versions prior to 151.0.7922.72 are affected, regardless of platform or channel (stable, beta, dev).

The CVSS score of 6.5 indicates a moderate impact. With an EPSS score below 1% the likelihood of exploitation is low, and the vulnerability is not listed in CISA KEV. The likely attack vector requires an attacker to first compromise the renderer process and then deliver a specially crafted HTML page that tricks the browser into ignoring navigation restrictions. If successful, the attacker can redirect the user or load malicious content.