Google Chrome PDF Insufficient Policy Enforcement Navigation Restriction Bypass Vulnerability on Android

A vulnerability in Google Chrome on Android, prior to version 146.0.7680.71, allowed remote attackers to bypass navigation restrictions in PDF files in the Chrome app. This was achieved through a crafted HTML page, exploiting insufficient policy enforcement.

Impact

Exploitation of this vulnerability could lead to unauthorized navigation actions being performed, potentially allowing attackers to manipulate the user's PDF viewing experience or extract information in an unintended manner.

Remediation

Users can update to Google Chrome version 146.0.7680.71 or later to address this vulnerability.