CyberRota Analysis
AI-GeneratedA vulnerability in WebXR within Google Chrome prior to version 151.0.7922.72 allows remote attackers to bypass the same-origin policy through specially crafted HTML pages. This could lead to unauthorized access to sensitive data across different origins, potentially compromising user privacy and security. Organizations using affected versions of Chrome should prioritize updating to mitigate potential exploitation risks.
CVE
CVE-2026-17823
Severity
MEDIUM
CVSS
6.5
EPSS
0.22%
Chrome
Original NVD Description
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)