This vulnerability involves an inappropriate implementation in the Media Router feature of Google Chrome versions before 151.0.7922.72. It enables a remote attacker to bypass the same origin policy, which is a critical security control that prevents web pages from interacting with resources from different origins. The CVSS v3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vulnerability is tracked as CWE-346, indicating insufficient verification of data authenticity. The vendor advisory URL is provided but does not explicitly state if a patch is available or if users must take action.

Successful exploitation allows a remote attacker to bypass the same origin policy in affected versions of Google Chrome, potentially enabling unauthorized modification or injection of content in the context of another origin. This can lead to integrity violations but does not impact confidentiality or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users should update to version 151.0.7922.72 or later once confirmed. No other specific mitigations are indicated by the vendor advisory.