Executive brief
A security issue in Google Chrome could allow a person with control over a user's network connection to bypass certain navigation protections. By using a specially crafted web page, an attacker could force the browser to navigate to restricted areas or bypass security policies. This could potentially be used to mislead users or facilitate further attacks, though it requires the attacker to be in a privileged network position.
Technical details
A vulnerability classified as insufficient policy enforcement exists in the Network component of Google Chrome prior to version 150.0.7871.47. An attacker in a privileged network position (such as on the same local network or controlling a proxy) could exploit this by serving a crafted HTML page to a user. This allows the attacker to bypass intended navigation restrictions within the browser. The issue is addressed in the stable channel update to version 150.0.7871.47 and later.
Affected products
- Google Chrome prior to 150.0.7871.47
Timeline
- 2026-06-30: advisory
- 2026-06-30: patched