CVE-2026-17743

Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17743

In Google Chrome versions prior to 151.0.7922.72 , a vulnerability exists due to insufficient policy enforcement in the ControlledFrame component. This flaw allows a remote attacker to bypass the same-origin policy by interacting with a crafted HTML page. The vulnerability affects Chromium -based...