This vulnerability arises from an inappropriate implementation in the Blink rendering engine used by Google Chrome versions before 151.0.7922.72. It enables a remote attacker to bypass the same origin policy, a critical security control that restricts how documents or scripts loaded from one origin can interact with resources from another origin. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level, with an attack vector of network, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There are no known exploits in the wild. The vendor advisory linked does not explicitly state the patch status or remediation level, but the affected versions are prior to 151.0.7922.72, implying that updating to 151.0.7922.72 or later addresses the issue.

Successful exploitation allows a remote attacker to bypass the same origin policy, potentially enabling unauthorized modification of data or scripts within the browser context. This can compromise the integrity of web content and user interactions but does not impact confidentiality or availability according to the CVSS vector.

Users and administrators should update Google Chrome to version 151.0.7922.72 or later to remediate this vulnerability. The vendor advisory does not specify alternative mitigations or temporary fixes. Patch status is inferred from the affected version range and should be confirmed by reviewing the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html.