An attacker can craft a malicious HTML page that, by inducing a user to perform specific UI gestures, bypasses the IFrameSandbox policy in Google Chrome versions before 147.0.7727.55. This policy bypass removes navigation restrictions, allowing the attacker to load content from arbitrary URLs or execute scripts that would normally be blocked. Because the weakness involves browser policy enforcement, it aligns with CWE‑693 (Noncompliance with Specified Security Policy) and CWE‑838 (Exploiting IFrameSandbox). The described impact can facilitate phishing, data exfiltration, or other malicious actions within the context of the affected browser session.

Google Chrome versions prior to 147.0.7727.55 running on Windows, macOS, and Linux operating systems are affected. Users of the Chrome Desktop browser on any of these platforms are susceptible to the policy bypass until the specified update is installed.

The CVSS score of 6.5 indicates a moderate severity, while the EPSS score of less than 1% shows a low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires user interaction; the attacker must persuade the victim to engage in specific UI gestures within the browser. Although the attack path is limited to social engineering, the potential for bypassing navigation controls raises concern, especially for users visiting untrusted sites.