CVE-2026-17854

Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17854

CVE-2026-17854 affects Google Chrome’s WebMCP component. The vulnerability is an insufficient policy enforcement issue that could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. It concerns Chrome versions prior to 151.0.7922.72, with the impact described as cros...

EUVD-2026-50603

Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...