A vulnerable navigation check in Google Chrome on iOS allowed a remote attacker to bypass navigation restrictions through a specially crafted HTML page. The attacker could cause the browser to navigate to URLs that would normally be blocked, enabling phishing, credential theft, or other malicious behavior.

Affected browsers are Google Chrome on iOS versions earlier than 146.0.7680.71. The vulnerability is specific to the iOS client; other platform builds are not known to be affected.

The CVSS score is 6.5, indicating medium severity. EPSS is below 1 %, implying low exploitation probability; the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the victim to load a crafted web page, typically via a phishing link or malicious website. Once accessed, the browser silently navigates to the attacker‑chosen URL, bypassing user controls.