Executive brief
A security issue in Google Chrome could allow a malicious website to bypass navigation restrictions. This means a specially crafted web page could potentially redirect users or load content in ways that the browser's security policies are intended to prevent. Users are advised to update to the latest version of Chrome to mitigate this risk.
Technical details
A vulnerability classified as insufficient policy enforcement exists in the 'Actor' component of Google Chrome. A remote attacker can exploit this flaw by enticing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to bypass browser navigation restrictions, potentially leading to unauthorized page transitions or security policy circumvention. The issue is fixed in Chrome version 150.0.7871.47 and later.
Affected products
- Google Chrome prior to 150.0.7871.47
Timeline
- 2026-06-30: disclosed
- 2026-06-30: patched