CyberRota Analysis
AI-GeneratedGoogle Chrome versions prior to 151.0.7922.72 are vulnerable due to insufficient policy enforcement in Bluetooth, allowing remote attackers to bypass the same origin policy through a specially crafted HTML page. This could lead to unauthorized access to sensitive data or manipulation of web content. Organizations using affected Chrome versions should prioritize updating to mitigate potential exploitation risks.
CVE
CVE-2026-17986
Severity
MEDIUM
CVSS
6.5
EPSS
0.21%
Chrome
Original NVD Description
Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)