Executive brief
A vulnerability in Google Chrome's Permissions Policy could allow a malicious website to bypass intended navigation restrictions. This means a user visiting a specially crafted webpage might be redirected or navigated to sites that should have been blocked by the browser's security policies. This could potentially be used to facilitate phishing or other web-based attacks by circumventing security controls designed to limit where a page can navigate.
Technical details
This vulnerability is classified as an insufficient policy enforcement flaw within the PermissionsPolicy component of Google Chrome. A remote attacker can exploit this by hosting a crafted HTML page that, when visited by a user, triggers a bypass of navigation restrictions. The root cause is a failure in the browser's mechanism for enforcing defined security policies regarding frame or window navigation. Successful exploitation allows an attacker to navigate the browser to unauthorized origins or bypass security headers intended to restrict such movement. The issue is resolved in Google Chrome version 150.0.7871.47 and later.
Affected products
- Google Chrome prior to 150.0.7871.47
Timeline
- 2026-06-30: disclosed
- 2026-06-30: patched