MEDIUM 6.5 NVD
CVE-2026-17823
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
Affected Products
- google/chrome
References
- https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924
- https://issues.chromium.org/issues/517628043
This medium severity vulnerability with a CVSS score of 6.5 was published on 2026-07-30 via NVD. Affected: google/chrome.
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.